Hi,

The following vulnerabilities were published for mysql-9.7.

CVE-2026-46936[0]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: DDL).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-47008[1]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily
| exploitable vulnerability allows high privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-47012[2]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-47023[3]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-47052[4]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-47064[5]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable
| vulnerability allows low privileged attacker with network access via
| multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60145[6]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60163[7]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Group Replication Plugin).  Supported
| versions that are affected are MySQL Server: 8.4.0-8.4.10,
| 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and
| 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated
| attacker with logon to the infrastructure where MySQL Server, MySQL
| Cluster executes to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in takeover of
| MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.4
| (Confidentiality, Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-60174[8]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1.
| Easily exploitable vulnerability allows low privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60177[9]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Clone Plugin).  Supported versions that
| are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL
| Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to
| exploit vulnerability allows high privileged attacker with network
| access via multiple protocols to compromise MySQL Server, MySQL
| Cluster.  Successful attacks of this vulnerability can result in
| unauthorized ability to cause a hang or frequently repeatable crash
| (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score
| 4.4 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60178[10]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Clone Plugin).  Supported versions that
| are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL
| Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to
| exploit vulnerability allows high privileged attacker with network
| access via multiple protocols to compromise MySQL Server, MySQL
| Cluster.  Successful attacks of this vulnerability can result in
| takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6
| (Confidentiality, Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-60181[11]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Configurator).  Supported versions that
| are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster:
| 9.7.0-9.7.1. Difficult to exploit vulnerability allows low
| privileged attacker with logon to the infrastructure where MySQL
| Server, MySQL Cluster executes to compromise MySQL Server, MySQL
| Cluster.  Successful attacks require human interaction from a person
| other than the attacker. Successful attacks of this vulnerability
| can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.7 (Confidentiality, Integrity and Availability impacts).
| CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).


CVE-2026-60182[12]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Clone Plugin).  Supported versions that
| are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL
| Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to
| exploit vulnerability allows high privileged attacker with network
| access via multiple protocols to compromise MySQL Server, MySQL
| Cluster.  Successful attacks of this vulnerability can result in
| unauthorized ability to cause a hang or frequently repeatable crash
| (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score
| 4.4 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60183[13]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Clone Plugin).  Supported versions that
| are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL
| Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to
| exploit vulnerability allows high privileged attacker with logon to
| the infrastructure where MySQL Server, MySQL Cluster executes to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in takeover of MySQL Server, MySQL Cluster.
| CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-60184[14]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60185[15]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60186[16]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Group Replication Plugin).  Supported
| versions that are affected are MySQL Server: 8.4.0-8.4.10,
| 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and
| 9.7.0-9.7.1. Difficult to exploit vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60187[17]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60188[18]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60189[19]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60190[20]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a partial denial of service (partial DOS) of MySQL
| Server, MySQL Cluster. CVSS 3.1 Base Score 2.2 (Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).


CVE-2026-60191[21]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with logon to the
| infrastructure where MySQL Server, MySQL Cluster executes to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.1 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60194[22]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: JSON Duality).  Supported versions that
| are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster:
| 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged
| attacker with network access via multiple protocols to compromise
| MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60195[23]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: JSON Duality).  Supported versions that
| are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster:
| 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged
| attacker with network access via multiple protocols to compromise
| MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60311[24]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 9.0.0-9.7.1;  MySQL Cluster: 9.0.0-9.7.1.
| Easily exploitable vulnerability allows low privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60315[25]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: X Plugin).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable
| vulnerability allows unauthenticated attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster and  unauthorized read access to
| a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1
| Base Score 8.2 (Confidentiality and Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).


CVE-2026-60316[26]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: X Plugin).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in takeover of
| MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2
| (Confidentiality, Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-60324[27]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1.
| Easily exploitable vulnerability allows low privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60331[28]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with logon to the
| infrastructure where MySQL Server, MySQL Cluster executes to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in takeover of MySQL Server, MySQL Cluster.
| CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-60332[29]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Group Replication GCS).  Supported
| versions that are affected are MySQL Server: 8.4.0-8.4.10,
| 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and
| 9.7.0-9.7.1. Difficult to exploit vulnerability allows high
| privileged attacker with logon to the infrastructure where MySQL
| Server, MySQL Cluster executes to compromise MySQL Server, MySQL
| Cluster.  Successful attacks of this vulnerability can result in
| takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4
| (Confidentiality, Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-60585[30]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in takeover of
| MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6
| (Confidentiality, Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-60718[31]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: JSON).  Supported versions that are
| affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1.
| Easily exploitable vulnerability allows low privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-60747[32]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable
| vulnerability allows unauthenticated attacker with logon to the
| infrastructure where MySQL Server, MySQL Cluster executes to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 6.2 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-61081[33]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Performance Schema).  Supported versions
| that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL
| Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily
| exploitable vulnerability allows high privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in  unauthorized read access to a subset of MySQL Server, MySQL
| Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).


CVE-2026-61093[34]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1.
| Easily exploitable vulnerability allows low privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-61094[35]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in takeover of
| MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2
| (Confidentiality, Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-61096[36]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Pluggable Auth).  Supported versions that
| are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL
| Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to
| exploit vulnerability allows unauthenticated attacker with logon to
| the infrastructure where MySQL Server, MySQL Cluster executes to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in  unauthorized update, insert or delete
| access to some of MySQL Server, MySQL Cluster accessible data. CVSS
| 3.1 Base Score 2.9 (Integrity impacts).  CVSS Vector:
| (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).


CVE-2026-61108[37]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: GIS).  Supported versions that are
| affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1.
| Easily exploitable vulnerability allows low privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-61109[38]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: JSON).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
| 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable
| vulnerability allows low privileged attacker with network access via
| multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-61128[39]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-61144[40]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-46936
https://www.cve.org/CVERecord?id=CVE-2026-46936
[1] https://security-tracker.debian.org/tracker/CVE-2026-47008
https://www.cve.org/CVERecord?id=CVE-2026-47008
[2] https://security-tracker.debian.org/tracker/CVE-2026-47012
https://www.cve.org/CVERecord?id=CVE-2026-47012
[3] https://security-tracker.debian.org/tracker/CVE-2026-47023
https://www.cve.org/CVERecord?id=CVE-2026-47023
[4] https://security-tracker.debian.org/tracker/CVE-2026-47052
https://www.cve.org/CVERecord?id=CVE-2026-47052
[5] https://security-tracker.debian.org/tracker/CVE-2026-47064
https://www.cve.org/CVERecord?id=CVE-2026-47064
[6] https://security-tracker.debian.org/tracker/CVE-2026-60145
https://www.cve.org/CVERecord?id=CVE-2026-60145
[7] https://security-tracker.debian.org/tracker/CVE-2026-60163
https://www.cve.org/CVERecord?id=CVE-2026-60163
[8] https://security-tracker.debian.org/tracker/CVE-2026-60174
https://www.cve.org/CVERecord?id=CVE-2026-60174
[9] https://security-tracker.debian.org/tracker/CVE-2026-60177
https://www.cve.org/CVERecord?id=CVE-2026-60177
[10] https://security-tracker.debian.org/tracker/CVE-2026-60178
https://www.cve.org/CVERecord?id=CVE-2026-60178
[11] https://security-tracker.debian.org/tracker/CVE-2026-60181
https://www.cve.org/CVERecord?id=CVE-2026-60181
[12] https://security-tracker.debian.org/tracker/CVE-2026-60182
https://www.cve.org/CVERecord?id=CVE-2026-60182
[13] https://security-tracker.debian.org/tracker/CVE-2026-60183
https://www.cve.org/CVERecord?id=CVE-2026-60183
[14] https://security-tracker.debian.org/tracker/CVE-2026-60184
https://www.cve.org/CVERecord?id=CVE-2026-60184
[15] https://security-tracker.debian.org/tracker/CVE-2026-60185
https://www.cve.org/CVERecord?id=CVE-2026-60185
[16] https://security-tracker.debian.org/tracker/CVE-2026-60186
https://www.cve.org/CVERecord?id=CVE-2026-60186
[17] https://security-tracker.debian.org/tracker/CVE-2026-60187
https://www.cve.org/CVERecord?id=CVE-2026-60187
[18] https://security-tracker.debian.org/tracker/CVE-2026-60188
https://www.cve.org/CVERecord?id=CVE-2026-60188
[19] https://security-tracker.debian.org/tracker/CVE-2026-60189
https://www.cve.org/CVERecord?id=CVE-2026-60189
[20] https://security-tracker.debian.org/tracker/CVE-2026-60190
https://www.cve.org/CVERecord?id=CVE-2026-60190
[21] https://security-tracker.debian.org/tracker/CVE-2026-60191
https://www.cve.org/CVERecord?id=CVE-2026-60191
[22] https://security-tracker.debian.org/tracker/CVE-2026-60194
https://www.cve.org/CVERecord?id=CVE-2026-60194
[23] https://security-tracker.debian.org/tracker/CVE-2026-60195
https://www.cve.org/CVERecord?id=CVE-2026-60195
[24] https://security-tracker.debian.org/tracker/CVE-2026-60311
https://www.cve.org/CVERecord?id=CVE-2026-60311
[25] https://security-tracker.debian.org/tracker/CVE-2026-60315
https://www.cve.org/CVERecord?id=CVE-2026-60315
[26] https://security-tracker.debian.org/tracker/CVE-2026-60316
https://www.cve.org/CVERecord?id=CVE-2026-60316
[27] https://security-tracker.debian.org/tracker/CVE-2026-60324
https://www.cve.org/CVERecord?id=CVE-2026-60324
[28] https://security-tracker.debian.org/tracker/CVE-2026-60331
https://www.cve.org/CVERecord?id=CVE-2026-60331
[29] https://security-tracker.debian.org/tracker/CVE-2026-60332
https://www.cve.org/CVERecord?id=CVE-2026-60332
[30] https://security-tracker.debian.org/tracker/CVE-2026-60585
https://www.cve.org/CVERecord?id=CVE-2026-60585
[31] https://security-tracker.debian.org/tracker/CVE-2026-60718
https://www.cve.org/CVERecord?id=CVE-2026-60718
[32] https://security-tracker.debian.org/tracker/CVE-2026-60747
https://www.cve.org/CVERecord?id=CVE-2026-60747
[33] https://security-tracker.debian.org/tracker/CVE-2026-61081
https://www.cve.org/CVERecord?id=CVE-2026-61081
[34] https://security-tracker.debian.org/tracker/CVE-2026-61093
https://www.cve.org/CVERecord?id=CVE-2026-61093
[35] https://security-tracker.debian.org/tracker/CVE-2026-61094
https://www.cve.org/CVERecord?id=CVE-2026-61094
[36] https://security-tracker.debian.org/tracker/CVE-2026-61096
https://www.cve.org/CVERecord?id=CVE-2026-61096
[37] https://security-tracker.debian.org/tracker/CVE-2026-61108
https://www.cve.org/CVERecord?id=CVE-2026-61108
[38] https://security-tracker.debian.org/tracker/CVE-2026-61109
https://www.cve.org/CVERecord?id=CVE-2026-61109
[39] https://security-tracker.debian.org/tracker/CVE-2026-61128
https://www.cve.org/CVERecord?id=CVE-2026-61128
[40] https://security-tracker.debian.org/tracker/CVE-2026-61144
https://www.cve.org/CVERecord?id=CVE-2026-61144

Regards,
Salvatore

We believe that the bug you reported is fixed in the latest version of
mysql-9.7, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1142644@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Lena Voytek <lena@debian.org> (supplier of updated mysql-9.7 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 28 Jul 2026 09:42:43 -0400
Source: mysql-9.7
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 9.7.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>
Changed-By: Lena Voytek <lena@debian.org>
Closes: 1142183 1142644
Changes:
 mysql-9.7 (9.7.2-1) unstable; urgency=medium
 .
   * Import upstream version 9.7.2 to fix security issues
     - https://www.oracle.com/security-alerts/cpujul2026.html#AppendixMSQL
     - CVE-2026-46936 CVE-2026-47008 CVE-2026-47012 CVE-2026-47023
       CVE-2026-47052 CVE-2026-47064 CVE-2026-60145 CVE-2026-60163
       CVE-2026-60174 CVE-2026-60177 CVE-2026-60178 CVE-2026-60181
       CVE-2026-60182 CVE-2026-60183 CVE-2026-60184 CVE-2026-60185
       CVE-2026-60186 CVE-2026-60187 CVE-2026-60188 CVE-2026-60189
       CVE-2026-60190 CVE-2026-60191 CVE-2026-60194 CVE-2026-60195
       CVE-2026-60311 CVE-2026-60315 CVE-2026-60316 CVE-2026-60324
       CVE-2026-60331 CVE-2026-60332 CVE-2026-60585 CVE-2026-60718
       CVE-2026-60747 CVE-2026-61081 CVE-2026-61093 CVE-2026-61094
       CVE-2026-61096 CVE-2026-61108 CVE-2026-61109 CVE-2026-61128
       CVE-2026-61144
     Upstream release notes:
     - https://dev.mysql.com/doc/relnotes/mysql/9.7/en/news-9-7-2.html
     (Closes: #1142644)
   * d/mysql-server-core.install: Include thread_pool.so from new version.
   * d/control: Add mariadb-client-compat to mysql-client conflicts.
     (Closes: #1142183)
Checksums-Sha1:
 c19805e51f1bc3ce0abc1a1119db37d683fc3b0d 3529 mysql-9.7_9.7.2-1.dsc
 debf08cc27aac64bef3d77e111142878883e3531 429211578 mysql-9.7_9.7.2.orig.tar.gz
 a5d18625eb23019d6ae2248609007ee8e18cb9fa 833 mysql-9.7_9.7.2.orig.tar.gz.asc
 a377373ae0b2b451626b0f2eecd4617c0c776f58 140520 mysql-9.7_9.7.2-1.debian.tar.xz
 68db9bc1e01a0759ecc60bb1177ccbf1a09cc506 9605 mysql-9.7_9.7.2-1_source.buildinfo
Checksums-Sha256:
 049416568aabc103e09964f3eb736a09b14a7232ae12f594441d43bc48f98ab8 3529 mysql-9.7_9.7.2-1.dsc
 e5a676c7cb73738dc6ea33db2093806ebd512b629a139b897fcab68fcd81aaa4 429211578 mysql-9.7_9.7.2.orig.tar.gz
 afbe95ffcc1ccaf63b3b6b1ce05ab9c4ee0040cac40f5965a93760604427ccb0 833 mysql-9.7_9.7.2.orig.tar.gz.asc
 8ddcfb0ec9500383dcb1e996fe80bb7c1a8f7969785b4adf329d30d22dcba723 140520 mysql-9.7_9.7.2-1.debian.tar.xz
 1aa53496ace097b9f3dda5aeb3d10f4dc6ee988abff8a5c09f412b723b868b4f 9605 mysql-9.7_9.7.2-1_source.buildinfo
Files:
 631a41c3c77cb2747fbe4061eaa8f0bc 3529 database optional mysql-9.7_9.7.2-1.dsc
 dd0a38f0e4187f0f096964363c37c4ba 429211578 database optional mysql-9.7_9.7.2.orig.tar.gz
 0127fa32f2a8585cda6d46ab8e97d432 833 database optional mysql-9.7_9.7.2.orig.tar.gz.asc
 6ea9cd0d9fbb205f29ba3813c9b030f2 140520 database optional mysql-9.7_9.7.2-1.debian.tar.xz
 8e34f6f2e0c24fd2ed9b893b7013d06d 9605 database optional mysql-9.7_9.7.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=YOn7
-----END PGP SIGNATURE-----