MySQL
Databases · products/mysql.yaml · RSS
Latest 26.10.0 Oct 20, 2026
Latest per track
| Track | Latest | Released |
|---|---|---|
| 9.7 (LTS) | 9.7.4 | Oct 20, 2026 |
| 8.4 (LTS) | 8.4.13 | Sep 30, 2026 |
| 8.0 | 8.0.46 | Apr 7, 2026 |
Lifecycle
| Branch | Latest | Released | End of life |
|---|---|---|---|
| 26.7 | 26.7.0 | Jul 28, 2026 | — · maintained |
| 9.7 LTS | 9.7.4 | Apr 21, 2026 | Apr 30, 2034 · maintained |
| 9.6 | 9.6.1 | Jan 20, 2026 | Apr 21, 2026 · ended |
| 9.5 | 9.5.2 | Oct 21, 2025 | Jan 20, 2026 · ended |
| 9.4 | 9.4.2 | Jul 22, 2025 | Oct 21, 2025 · ended |
| 9.3 | 9.3.2 | Apr 15, 2025 | Jul 22, 2025 · ended |
| 9.2 | 9.2.2 | Jan 21, 2025 | Apr 15, 2025 · ended |
| 9.1 | 9.1.2 | Oct 15, 2024 | Jan 21, 2025 · ended |
| 9.0 | 9.0.1 | Jul 1, 2024 | Oct 15, 2024 · ended |
| 8.4 LTS | 8.4.13 | Apr 30, 2024 | Apr 30, 2032 · maintained |
| 8.3 | 8.3.0 | Jan 16, 2024 | Apr 30, 2024 · ended |
| 8.2 | 8.2.0 | Oct 25, 2023 | Jan 16, 2024 · ended |
| 8.1 | 8.1.0 | Jul 18, 2023 | Oct 25, 2023 · ended |
| 8.0 LTS | 8.0.46 | Apr 19, 2018 | Apr 30, 2026 · ended |
| 5.7 | 5.7.44 | Oct 9, 2015 | Oct 31, 2023 · ended |
| 5.6 | 5.6.51 | Feb 1, 2013 | Feb 28, 2021 · ended |
| 5.5 | 5.5.63 | Dec 3, 2010 | Dec 31, 2018 · ended |
Recent releases
securityFixed an issue relating to server-supplied RSA public-key handling during client-side SHA-2 authentication. (Bug #39883040)
securityFixed an issue relating to runtime key-type validation by keyring UDFs. (Bug #39838747)
securityFixed an issue relating to client parsing of WebAuthn assertion challenge packets. (Bug #39740347)
breakingAs of this release, MySQL no longer supports Enterprise Linux 7 (and associated glibc 2.17 generic).
securityMySQL now supports post-quantum cryptography (PQC) in TLS 1.3 connections for OpenSSL 3.5.0 or later. This enables negotiation of PQC-capable TLS key-exchange groups, including hybrid classical/PQC groups, and advertising of PQC TLS handshake signature algorithms. The following system variables…
securityforce_pqc: only accept main TLS connections negotiated with a PQC- compatible key exchange group.
securityFixed an issue relating to server-supplied RSA public-key handling during client-side SHA-2 authentication. (Bug #39883040)
securityFixed an issue relating to runtime key-type validation by keyring UDFs. (Bug #39838747)
securityFixed an issue relating to client parsing of WebAuthn assertion challenge packets. (Bug #39740347)
breakingAs of this release, MySQL no longer supports Enterprise Linux 7 (and associated glibc 2.17 generic).
securityThis release is a Critical Security Patch Update. See Oracle Critical Security Patch Update Advisory - June 2026 for more information.
securityAuthentication now supports PBKDF2 storage format with Caching_sha2_password, providing enhanced security and flexibility. This update allows for the use of PBKDF2 with SHA512, enabling a smoother migration path from existing formats and ensuring even stronger security guarantees. With this…
breakingUnder certain circumstances, find_in_set() could return incorrect results. The optimization which caused this has been removed. Our thanks to Jingqi Tian for the contribution. (Bug #119995, Bug #39056621)
securityMySQL Enterprise Edition 9.7.0 introduces dynamic data masking policies. These policies enable masking at the column level in the base table, enabling least-privilege access. The following SQL statements are added: The following SQL statements are updated to support masking policies: The following…
breakingA number of unused symbols were removed from the code base. (Bug #38557463)
breakingInnoDB: InnoDB redo logging error messages now include the current LSN and redo log capacity information. A new warning code ER_IB_WRN_REDO_DISABLED_INFO is added which includes the current LSN. A new error code ER_IB_MSG_LOG_WRITER_WAIT_ON_NEW_LOG_FILE_INFO is added to include the current log…
breakingInnoDB: The field fk_max_recusive_level in dict_table_t struct is no longer used and has been removed. Our thanks to Xiaocong Ding for the contribution. (Bug #119063, Bug #38492574)
securitySecurity Enhancement: The default value of caching_sha2_password_digest_rounds is increased to 10,000. (WL #16974)
securityMySQL Replication supports enhanced security features with encryption now being enabled for all replication connections by default. With this configuration change, the default value of the SOURCE_SSL option in the CHANGE REPLICATION SOURCE TO Statement has been changed to 1, the default value of…
breakingImportant Change: IFNULL() used in a LIKE clause raised ER_CANT_AGGREGATE_2COLLATIONS. This was due to the fact that IFNULL() returns a binary collation and the collation derivation NONE, but NONE was not allowed in this context, leading to the error. We solve this problem by making a slight…
breakingRemoved a warning in gcs_xcom_networking.cc. (Bug #38021787)
breakingMySQL Server now requires GCC version 11 or later to compile. As part of this change, support for ARM systems using RHEL7 is removed in this release, due to the lack of availability of GCC 11 on that platform. (Bug #38004285)
Security advisories
5.0 CVE-2026-34317 Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vu…
5.8 CVE-2026-34318 Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Difficult to exploit…
5.0 CVE-2026-34319 Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vu…
4.9 CVE-2026-21964 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitab…
2.7 CVE-2025-50098 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vu…
4.9 CVE-2025-50099 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability…
2.2 CVE-2025-50100 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exp…
4.9 CVE-2025-50101 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vu…
4.9 CVE-2025-50102 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vu…
4.4 CVE-2025-50103 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 9.0.0-9.3.0. Difficult to exploit vulnerability allows…
2.7 CVE-2025-50104 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerab…
4.9 CVE-2025-50091 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vu…
4.9 CVE-2025-50092 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability…
4.9 CVE-2025-50093 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerab…
4.9 CVE-2025-50094 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.42, 8.4.5 and 9.3.0. Easily exploitable vulnerability allows high…
4.9 CVE-2025-50095 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.3.0. Easily exploitable vulnerability allows high privile…
4.4 CVE-2025-50096 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability…
4.9 CVE-2025-50097 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exp…
6.5 CVE-2025-50083 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vu…
4.9 CVE-2025-50084 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vu…