Skip to content
OpenAdvisories
Medium ALSA-2026:23332 22 CVEs

Moderate: mysql security update

Published Jun 4, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)
* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)
* mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)
* mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)
* mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)
* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 7

ReleasePackageFixed in
AlmaLinux · 9 mysql 8.0.46-1.el9_8
AlmaLinux · 9 mysql-common 8.0.46-1.el9_8
AlmaLinux · 9 mysql-devel 8.0.46-1.el9_8
AlmaLinux · 9 mysql-errmsg 8.0.46-1.el9_8
AlmaLinux · 9 mysql-libs 8.0.46-1.el9_8
AlmaLinux · 9 mysql-server 8.0.46-1.el9_8
AlmaLinux · 9 mysql-test 8.0.46-1.el9_8

Vulnerabilities 22

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-21998
  • report
    https://access.redhat.com/security/cve/CVE-2026-22001
  • report
    https://access.redhat.com/security/cve/CVE-2026-22002
  • report
    https://access.redhat.com/security/cve/CVE-2026-22004
  • report
    https://access.redhat.com/security/cve/CVE-2026-22005
  • report
    https://access.redhat.com/security/cve/CVE-2026-22009
  • report
    https://access.redhat.com/security/cve/CVE-2026-22015
  • report
    https://access.redhat.com/security/cve/CVE-2026-22017
  • report
    https://access.redhat.com/security/cve/CVE-2026-34267
  • report
    https://access.redhat.com/security/cve/CVE-2026-34270
  • report
    https://access.redhat.com/security/cve/CVE-2026-34271
  • report
    https://access.redhat.com/security/cve/CVE-2026-34276
  • report
    https://access.redhat.com/security/cve/CVE-2026-34278
  • report
    https://access.redhat.com/security/cve/CVE-2026-34293
  • report
    https://access.redhat.com/security/cve/CVE-2026-34303
  • report
    https://access.redhat.com/security/cve/CVE-2026-34304
  • report
    https://access.redhat.com/security/cve/CVE-2026-34308
  • report
    https://access.redhat.com/security/cve/CVE-2026-35236
  • report
    https://access.redhat.com/security/cve/CVE-2026-35237
  • report
    https://access.redhat.com/security/cve/CVE-2026-35238
  • report
    https://access.redhat.com/security/cve/CVE-2026-35239
  • report
    https://access.redhat.com/security/cve/CVE-2026-35240
  • report
    https://bugzilla.redhat.com/2460274
  • report
    https://bugzilla.redhat.com/2460275
  • report
    https://bugzilla.redhat.com/2460276
  • report
    https://bugzilla.redhat.com/2460279
  • report
    https://bugzilla.redhat.com/2460295
  • report
    https://bugzilla.redhat.com/2460312
  • report
    https://bugzilla.redhat.com/2460315
  • report
    https://bugzilla.redhat.com/2460316
  • report
    https://bugzilla.redhat.com/2460323
  • report
    https://bugzilla.redhat.com/2460324
  • report
    https://bugzilla.redhat.com/2460325
  • report
    https://bugzilla.redhat.com/2460326
  • report
    https://bugzilla.redhat.com/2460329
  • report
    https://bugzilla.redhat.com/2460331
  • report
    https://bugzilla.redhat.com/2460335
  • report
    https://bugzilla.redhat.com/2460340
  • report
    https://bugzilla.redhat.com/2460342