RLSA-2026:25919 — Moderate: mysql:8.0 security update

Summary

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)

* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)

* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)

* mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)

* mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)

* mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)

* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)

* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)

* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 5

Release	Package	Fixed in
Rocky Linux · 8	mecab	0:0.996-2.module+el8.10.0+2091+db4d14f6
Rocky Linux · 8	mecab	0:0.996-2.module+el8.10.0+1676+9b4b6e24
Rocky Linux · 8	mecab	0:0.996-2.module+el8.10.0+1937+28fbbc83
Rocky Linux · 8	mecab-ipadic	0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
Rocky Linux · 8	mecab-ipadic	0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6

Vulnerabilities 22

Medium 6.5

CVE-2026-22009 Public exploit

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 6.5

CVE-2026-22017 Public exploit

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 6.5

CVE-2026-34270

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 6.5

CVE-2026-34271

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 6.5

CVE-2026-34276

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 6.5

CVE-2026-34303

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux

Apr 21, 2026
Medium 6.5

CVE-2026-34308 Public exploit

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affect…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-21998

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-22002 Public exploit

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-22004 Public exploit

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-22005 Public exploit

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-34267

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-34278

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-34293

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-34304

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-35236

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-35237

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-35238

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-35239

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.9

CVE-2026-35240

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Medium 4.3

CVE-2026-22015 Public exploit

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026
Low 2.7

CVE-2026-22001 Public exploit

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 21, 2026

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=2460274
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460275
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460276
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460279
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460295
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460312
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460315
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460316
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460323
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460324
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460325
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460326
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460329
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460331
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460335
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460340
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460342
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460344
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460348
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460356
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460358
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460368

Moderate: mysql:8.0 security update

Summary

Fixed packages 5

Vulnerabilities 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affect…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

References