Skip to content
OpenAdvisories
Medium ALSA-2026:26180 19 CVEs

Moderate: mysql:8.4 security update

Published Jun 16, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)
* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)
* mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)
* mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)
* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)
* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 14

ReleasePackageFixed in
AlmaLinux · 8 mecab 0.996-2.module_el8.10.0+4060+d4256e26
AlmaLinux · 8 mecab-devel 0.996-2.module_el8.10.0+4060+d4256e26
AlmaLinux · 8 mecab-ipadic 2.7.0.20070801-17.module_el8.10.0+4060+d4256e26
AlmaLinux · 8 mecab-ipadic 2.7.0.20070801-17.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mecab-ipadic-EUCJP 2.7.0.20070801-17.module_el8.10.0+4060+d4256e26
AlmaLinux · 8 mecab-ipadic-EUCJP 2.7.0.20070801-17.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mysql 8.4.9-1.module_el8.10.0+4193+cbb8e728
AlmaLinux · 8 mysql-common 8.4.9-1.module_el8.10.0+4193+cbb8e728
AlmaLinux · 8 mysql-devel 8.4.9-1.module_el8.10.0+4193+cbb8e728
AlmaLinux · 8 mysql-errmsg 8.4.9-1.module_el8.10.0+4193+cbb8e728
AlmaLinux · 8 mysql-libs 8.4.9-1.module_el8.10.0+4193+cbb8e728
AlmaLinux · 8 mysql-server 8.4.9-1.module_el8.10.0+4193+cbb8e728
AlmaLinux · 8 mysql-test 8.4.9-1.module_el8.10.0+4193+cbb8e728
AlmaLinux · 8 mysql-test-data 8.4.9-1.module_el8.10.0+4193+cbb8e728

Vulnerabilities 19

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-21998
  • report
    https://access.redhat.com/security/cve/CVE-2026-22001
  • report
    https://access.redhat.com/security/cve/CVE-2026-22002
  • report
    https://access.redhat.com/security/cve/CVE-2026-22004
  • report
    https://access.redhat.com/security/cve/CVE-2026-22005
  • report
    https://access.redhat.com/security/cve/CVE-2026-22009
  • report
    https://access.redhat.com/security/cve/CVE-2026-22015
  • report
    https://access.redhat.com/security/cve/CVE-2026-22017
  • report
    https://access.redhat.com/security/cve/CVE-2026-34270
  • report
    https://access.redhat.com/security/cve/CVE-2026-34271
  • report
    https://access.redhat.com/security/cve/CVE-2026-34276
  • report
    https://access.redhat.com/security/cve/CVE-2026-34303
  • report
    https://access.redhat.com/security/cve/CVE-2026-34304
  • report
    https://access.redhat.com/security/cve/CVE-2026-34308
  • report
    https://access.redhat.com/security/cve/CVE-2026-35236
  • report
    https://access.redhat.com/security/cve/CVE-2026-35237
  • report
    https://access.redhat.com/security/cve/CVE-2026-35238
  • report
    https://access.redhat.com/security/cve/CVE-2026-35239
  • report
    https://access.redhat.com/security/cve/CVE-2026-35240
  • report
    https://bugzilla.redhat.com/2460274
  • report
    https://bugzilla.redhat.com/2460275
  • report
    https://bugzilla.redhat.com/2460276
  • report
    https://bugzilla.redhat.com/2460279
  • report
    https://bugzilla.redhat.com/2460295
  • report
    https://bugzilla.redhat.com/2460312
  • report
    https://bugzilla.redhat.com/2460315
  • report
    https://bugzilla.redhat.com/2460316
  • report
    https://bugzilla.redhat.com/2460323
  • report
    https://bugzilla.redhat.com/2460324
  • report
    https://bugzilla.redhat.com/2460325
  • report
    https://bugzilla.redhat.com/2460326
  • report
    https://bugzilla.redhat.com/2460329
  • report
    https://bugzilla.redhat.com/2460335
  • report
    https://bugzilla.redhat.com/2460342
  • report
    https://bugzilla.redhat.com/2460344
  • report
    https://bugzilla.redhat.com/2460348
  • report
    https://bugzilla.redhat.com/2460356
  • report
    https://bugzilla.redhat.com/2460358
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-26180.html