leapp-repository security update

An update is available for leapp-repository. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Repositories for leapp Security Fixes: leapp-repository:...

RLSA-2026:67608 Important: leapp-repository security update

Repositories for leapp Security Fixes: leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scanmysql runs mysqld --validate-config as root and can load mysql-writable plugins CVE-2026-75092 For more details about the security issues, including the impact, a CVSS score,...

leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins

A privilege escalation flaw was found in the scanmysql actor of leapp-upgrade-el9toel10 provided by leapp-repository. During RHEL 9 to RHEL 10 upgrades, the actor runs: mysqld --validate-config --log-error-verbosity=2 directly as root in the Leapp actor context, bypassing the packaged MySQL syste...

CVE-2026-75092

CVE-2026-75092 is a local privilege escalation flaw in the scan_mysql actor of leapp-upgrade-el9toel10 (from the leapp-repository package). During RHEL 9 to RHEL 10 upgrades, the actor runs mysqld --validate-config directly as root , bypassing the packaged systemd unit that normally starts the da...

RHEL 9 : leapp-repository (RHSA-2026:67608)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67608 advisory. Repositories for leapp Security Fixes: leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scanmysql runs mysqld --validate- config ...

CVE-2026-75092: Execution with Unnecessary Privileges

A privilege escalation flaw was found in the scanmysql actor of leapp-upgrade-el9toel10 provided by leapp-repository. During RHEL 9 to RHEL 10 upgrades, the actor runs: mysqld --validate-config --log-error-verbosity=2 directly as root in the Leapp actor context, bypassing the packaged MySQL syste...

CLEANSTART-2026-WV49336 Security fixes in prom-mysqld-exporter-fips 0.18.0-r0

Package prom-mysqld-exporter-fips version 0.18.0-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-ZM91572 Security fixes in prometheus-mysqld-exporter 0.19.0-r0

Package prometheus-mysqld-exporter version 0.19.0-r0 fixes 1 vulnerabilities: CVE-2026-26958...

CLEANSTART-2026-AV37069 Security fixes in prometheus-mysqld-exporter 0.16.0-r2

Package prometheus-mysqld-exporter version 0.16.0-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-CT11931 Security fixes in prometheus-mysqld-exporter 0.18.0-r3

Package prometheus-mysqld-exporter version 0.18.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-UQ33261 Security fixes in prometheus-mysqld-exporter 0.15.0-r0

Package prometheus-mysqld-exporter version 0.15.0-r0 fixes 2 vulnerabilities: CVE-2025-22868, CVE-2024-24786...

CLEANSTART-2026-GQ72298 Security fixes in prom-mysqld-exporter-fips 0.18.0-r2

Package prom-mysqld-exporter-fips version 0.18.0-r2 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-CX37919 Security fixes in prometheus-mysqld-exporter-fips 0.19.0-r0

Package prometheus-mysqld-exporter-fips version 0.19.0-r0 fixes 1 vulnerabilities: CVE-2026-26958...

CLEANSTART-2026-SC64306 Security fixes in prom-mysqld-exporter-fips 0.18.0-r3

Package prom-mysqld-exporter-fips version 0.18.0-r3 fixes 10 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-BQ50426 Security fixes in prom-mysqld-exporter-fips 0.18.0-r1

Package prom-mysqld-exporter-fips version 0.18.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-CQ67878 Security fixes in prometheus-mysqld-exporter 0.17.2-r2

Package prometheus-mysqld-exporter version 0.17.2-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-YG84759 Security fixes in prometheus-mysqld-exporter 0.18.0-r1

Package prometheus-mysqld-exporter version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-26958...

CLEANSTART-2026-BH92291 Security fixes in prometheus-mysqld-exporter 0.15.0-r4

Package prometheus-mysqld-exporter version 0.15.0-r4 fixes 3 vulnerabilities: CVE-2026-42507, CVE-2026-42504, CVE-2026-27145...

CLEANSTART-2026-BS98761 Security fixes in prometheus-mysqld-exporter 0.15.0-r1

Package prometheus-mysqld-exporter version 0.15.0-r1 fixes 20 vulnerabilities: CVE-2026-39820, CVE-2026-27143, CVE-2026-42499, CVE-2026-39836, CVE-2026-32281...

CLEANSTART-2026-FG88760 Security fixes in prometheus-mysqld-exporter 0.15.0-r3

Package prometheus-mysqld-exporter version 0.15.0-r3 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39833, CVE-2026-39821, CVE-2026-42506...