Moderate Security Vulnerability in MySQL: Optimizer and InnoDB Issues
Summary
RLSA-2026:4828: Moderate: mysql security update. Affects mysql versions < 0:8.0.45-1.el9_7. Fixed in 0:8.0.45-1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
MySQL is a widely-used multi-user, multi-threaded SQL database server known for its reliability and performance. It serves as the backbone for many applications, providing robust data management capabilities. However, recent vulnerabilities have been identified that could potentially compromise its security, particularly affecting the optimizer and InnoDB components.
Vulnerability Detail
The vulnerabilities identified in MySQL include unspecified issues in the optimizer and InnoDB, which could lead to potential data exposure or corruption. These vulnerabilities stem from flaws in the way MySQL processes certain SQL queries and manages data transactions. The impact of these vulnerabilities can vary, but they may allow unauthorized access to sensitive data or disrupt normal database operations, leading to significant operational risks.
How To Fix
Minimum fixed version
0:8.0.45-1.el9_7
This is the first release that contains the fix.
sudo dnf update mysqlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, consider restricting access to the MySQL server and monitoring database activity closely. This can help mitigate risks until the update is applied.
Conclusion
In summary, MySQL has identified several vulnerabilities that could impact its security, particularly in the optimizer and InnoDB components. It is crucial to update to the latest patched version to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for open-source vulnerabilities in your software.
See every vulnerability recorded for mysql →
FAQ
The main vulnerabilities include unspecified issues in the optimizer and InnoDB, which could lead to data exposure or corruption.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 6.5, indicating a moderate level of risk.
You should update MySQL to the latest patched version (0:8.0.45-1.el9_7) and restrict access to the server as a temporary measure.
The Rocky Enterprise Software Foundation and Red Hat are credited for identifying and addressing these vulnerabilities in MySQL.
References
Related vulnerabilities
Recent vulnerabilities recorded for mysql.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
