Skip to content
OpenAdvisories
Medium ALSA-2026:25052 19 CVEs

Moderate: mysql:8.4 security update

Published Jun 10, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)
* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)
* mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)
* mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)
* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 15

ReleasePackageFixed in
AlmaLinux · 9 mecab 0.996-3.module_el9.6.0+152+8cbce00c.4
AlmaLinux · 9 mecab-devel 0.996-3.module_el9.6.0+152+8cbce00c.4
AlmaLinux · 9 mecab-ipadic 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c
AlmaLinux · 9 mecab-ipadic-EUCJP 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c
AlmaLinux · 9 mysql 8.4.9-1.module_el9.8.0+263+ff5e95cf
AlmaLinux · 9 mysql-common 8.4.9-1.module_el9.8.0+263+ff5e95cf
AlmaLinux · 9 mysql-devel 8.4.9-1.module_el9.8.0+263+ff5e95cf
AlmaLinux · 9 mysql-errmsg 8.4.9-1.module_el9.8.0+263+ff5e95cf
AlmaLinux · 9 mysql-libs 8.4.9-1.module_el9.8.0+263+ff5e95cf
AlmaLinux · 9 mysql-server 8.4.9-1.module_el9.8.0+263+ff5e95cf
AlmaLinux · 9 mysql-test 8.4.9-1.module_el9.8.0+263+ff5e95cf
AlmaLinux · 9 mysql-test-data 8.4.9-1.module_el9.8.0+263+ff5e95cf
AlmaLinux · 9 perl-DBD-MySQL 4.053-3.module_el9.8.0+235+a38ba90c
AlmaLinux · 9 rapidjson-devel 1.1.0-19.module_el9.6.0+152+8cbce00c
AlmaLinux · 9 rapidjson-doc 1.1.0-19.module_el9.6.0+152+8cbce00c

Vulnerabilities 19

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-21998
  • report
    https://access.redhat.com/security/cve/CVE-2026-22001
  • report
    https://access.redhat.com/security/cve/CVE-2026-22002
  • report
    https://access.redhat.com/security/cve/CVE-2026-22004
  • report
    https://access.redhat.com/security/cve/CVE-2026-22005
  • report
    https://access.redhat.com/security/cve/CVE-2026-22009
  • report
    https://access.redhat.com/security/cve/CVE-2026-22015
  • report
    https://access.redhat.com/security/cve/CVE-2026-22017
  • report
    https://access.redhat.com/security/cve/CVE-2026-34270
  • report
    https://access.redhat.com/security/cve/CVE-2026-34271
  • report
    https://access.redhat.com/security/cve/CVE-2026-34276
  • report
    https://access.redhat.com/security/cve/CVE-2026-34303
  • report
    https://access.redhat.com/security/cve/CVE-2026-34304
  • report
    https://access.redhat.com/security/cve/CVE-2026-34308
  • report
    https://access.redhat.com/security/cve/CVE-2026-35236
  • report
    https://access.redhat.com/security/cve/CVE-2026-35237
  • report
    https://access.redhat.com/security/cve/CVE-2026-35238
  • report
    https://access.redhat.com/security/cve/CVE-2026-35239
  • report
    https://access.redhat.com/security/cve/CVE-2026-35240
  • report
    https://bugzilla.redhat.com/2460274
  • report
    https://bugzilla.redhat.com/2460275
  • report
    https://bugzilla.redhat.com/2460276
  • report
    https://bugzilla.redhat.com/2460279
  • report
    https://bugzilla.redhat.com/2460295
  • report
    https://bugzilla.redhat.com/2460312
  • report
    https://bugzilla.redhat.com/2460315
  • report
    https://bugzilla.redhat.com/2460316
  • report
    https://bugzilla.redhat.com/2460323
  • report
    https://bugzilla.redhat.com/2460324
  • report
    https://bugzilla.redhat.com/2460325
  • report
    https://bugzilla.redhat.com/2460326
  • report
    https://bugzilla.redhat.com/2460329
  • report
    https://bugzilla.redhat.com/2460335
  • report
    https://bugzilla.redhat.com/2460342
  • report
    https://bugzilla.redhat.com/2460344
  • report
    https://bugzilla.redhat.com/2460348
  • report
    https://bugzilla.redhat.com/2460356
  • report
    https://bugzilla.redhat.com/2460358
  • advisory
    https://errata.almalinux.org/9/ALSA-2026-25052.html