Red Hat Product Errata RHSA-2026:23332 - Security Advisory Issued: 2026-06-04 Updated: 2026-06-04 RHSA-2026:23332 - Security Advisory Overview Updated Packages Synopsis Moderate: mysql security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for mysql is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004) mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238) mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236) mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303) mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304) mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2460274 - CVE-2026-22004 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460275 - CVE-2026-22001 mysql: Information Schema unspecified vulnerability (CPU Apr 2026) BZ - 2460276 - CVE-2026-34271 mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) BZ - 2460279 - CVE-2026-22009 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460295 - CVE-2026-35237 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460312 - CVE-2026-21998 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460315 - CVE-2026-22005 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460316 - CVE-2026-35238 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460323 - CVE-2026-35239 mysql: DML unspecified vulnerability (CPU Apr 2026) BZ - 2460324 - CVE-2026-22002 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460325 - CVE-2026-35236 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460326 - CVE-2026-34308 mysql: JSON unspecified vulnerability (CPU Apr 2026) BZ - 2460329 - CVE-2026-34303 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460331 - CVE-2026-34293 mysql: DML unspecified vulnerability (CPU Apr 2026) BZ - 2460335 - CVE-2026-35240 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460340 - CVE-2026-34267 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460342 - CVE-2026-22017 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460344 - CVE-2026-34304 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460348 - CVE-2026-22015 mysql: Information Schema unspecified vulnerability (CPU Apr 2026) BZ - 2460356 - CVE-2026-34276 mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) BZ - 2460358 - CVE-2026-34270 mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) BZ - 2460368 - CVE-2026-34278 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) RHEL-130028 - mysqld doesn't start in image mode due to missing/invalid user RHELBLD-18356 - rpmbuild fails on all 4 arches for mysql in Konflux pipeline CVEs CVE-2026-21998 CVE-2026-22001 CVE-2026-22002 CVE-2026-22004 CVE-2026-22005 CVE-2026-22009 CVE-2026-22015 CVE-2026-22017 CVE-2026-34267 CVE-2026-34270 CVE-2026-34271 CVE-2026-34276 CVE-2026-34278 CVE-2026-34293 CVE-2026-34303 CVE-2026-34304 CVE-2026-34308 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238 CVE-2026-35239 CVE-2026-35240 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM mysql-8.0.46-1.el9_8.src.rpm SHA-256: 98a6dbfbd4e3e85bcdccecb93c7dbf504f96b2f30c2334c5ea11b9bf89d5e071 x86_64 mysql-8.0.46-1.el9_8.x86_64.rpm SHA-256: ae8ebc0206b82d6d3b4e38f7a22062ce8aa1f8ad642e14803ce0b84a9c3615fc mysql-common-8.0.46-1.el9_8.x86_64.rpm SHA-256: 651a8a1d5feae2b6d76ede6f8a7d76a8ce270d090ac8ba509a594cf5bcdadd16 mysql-debuginfo-8.0.46-1.el9_8.x86_64.rpm SHA-256: 1d7de16dd9b1670b6bcb0c2262bb93d73ce1c59946607416bf0354159c17aca1 mysql-debugsource-8.0.46-1.el9_8.x86_64.rpm SHA-256: c433aaa793a9d985bea8b7b7d1948651f5d2f077fe170f6971f14fdf94a93ba9 mysql-devel-debuginfo-8.0.46-1.el9_8.x86_64.rpm SHA-256: 8239d1c0bdfbbf94a6bd5f9e2f30026a934a874c614d4a670b92aa16d2d64c26 mysql-errmsg-8.0.46-1.el9_8.x86_64.rpm SHA-256: 9eb2cba6b938223d2b0ef63169fc8c400e1f82fc77cdc6896c53f666e27116d3 mysql-libs-8.0.46-1.el9_8.x86_64.rpm SHA-256: 419db520ea85acc615e1cf8f2fbd7fc41c0e932f64e4f98d0bc8d05a315461b1 mysql-libs-debuginfo-8.0.46-1.el9_8.x86_64.rpm SHA-256: ca94e77e6a282f5835ebd703e4de26f4e347b2c424c85ec74838c57b423d4ba4 mysql-server-8.0.46-1.el9_8.x86_64.rpm SHA-256: abab78f8a4df59ab92198666c1105999de525da261597ddc88ff3f8e39f1f18f mysql-server-debuginfo-8.0.46-1.el9_8.x86_64.rpm SHA-256: 7ed2fb00d6800487defccea37b520e52796f284e332abc279ac104ce375db88e mysql-test-debuginfo-8.0.46-1.el9_8.x86_64.rpm SHA-256: 6ea8075784fb9dd6e249731b6c5716911a6a0aebee668d671e3dd7ee6e98a74c Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM mysql-8.0.46-1.el9_8.src.rpm SHA-256: 98a6dbfbd4e3e85bcdccecb93c7dbf504f96b2f30c2334c5ea11b9bf89d5e071 x86_64 mysql-8.0.46-1.el9_8.x86_64.rpm SHA-256: ae8ebc0206b82d6d3b4e38f7a22062ce8aa1f8ad642e14803ce0b84a9c3615fc mysql-common-8.0.46-1.el9_8.x86_64.rpm SHA-256: 651a8a1d5feae2b6d76ede6f8a7d76a8ce270d090ac8ba509a594cf5bcdadd16 mysql-debuginfo-8.0.46-1.el9_8.x86_64.rpm SHA-256: 1d7de16dd9b1670b6bcb0c2262bb93d73ce1c59946607416bf0354159c17aca1 mysql-debugsource-8.0.46-1.el9_8.x86_64.rpm SHA-256: c433aaa793a9d985bea8b7b7d1948651f5d2f077fe170f6971f14fdf94a93ba9 mysql-devel-debuginfo-8.0.46-1.el9_8.x86_64.rpm SHA-256: 8239d1c0bdfbbf94a6bd5f9e2f30026a934a874c614d4a670b92aa16d2d64c26 mysql-errmsg-8.0.46-1.el9_8.x86_64.rpm SHA-256: 9eb2cba6b938223d2b0ef63169fc8c400e1f82fc77cdc6896c53f666e27116d3 mysql-libs-8.0.46-1.el9_8.x86_64.rpm SHA-256: 419db520ea85acc615e1cf8f2fbd7fc41c0e932f64e4f98d0bc8d05a315461b1 mysql-libs-debuginfo-8.0.46-1.el9_8.x86_64.rpm SHA-256: ca94e77e6a282f5835ebd703e4de26f4e347b2c424c85ec74838c57b423d4ba4 mysql-server-8.0.46-1.el9_8.x86_64.rpm SHA-256: abab78f8a4df59ab92198666c1105999de525da261597ddc88ff3f8e39f1f18f mysql-server-debuginfo-8.0.46-1.el9_8.x86_64.rpm SHA-256: 7ed2fb00d6800487defccea37b52