Red Hat Product Errata RHSA-2026:25052 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:25052 - Security Advisory Overview Updated Packages Synopsis Moderate: mysql:8.4 security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the mysql:8.4 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004) mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238) mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236) mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304) mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2460274 - CVE-2026-22004 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460275 - CVE-2026-22001 mysql: Information Schema unspecified vulnerability (CPU Apr 2026) BZ - 2460276 - CVE-2026-34271 mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) BZ - 2460279 - CVE-2026-22009 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460295 - CVE-2026-35237 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460312 - CVE-2026-21998 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460315 - CVE-2026-22005 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460316 - CVE-2026-35238 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460323 - CVE-2026-35239 mysql: DML unspecified vulnerability (CPU Apr 2026) BZ - 2460324 - CVE-2026-22002 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460325 - CVE-2026-35236 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460326 - CVE-2026-34308 mysql: JSON unspecified vulnerability (CPU Apr 2026) BZ - 2460329 - CVE-2026-34303 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460335 - CVE-2026-35240 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460342 - CVE-2026-22017 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460344 - CVE-2026-34304 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460348 - CVE-2026-22015 mysql: Information Schema unspecified vulnerability (CPU Apr 2026) BZ - 2460356 - CVE-2026-34276 mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) BZ - 2460358 - CVE-2026-34270 mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) RHEL-153202 - mysqld doesn't start in image mode due to missing/invalid user CVEs CVE-2026-21998 CVE-2026-22001 CVE-2026-22002 CVE-2026-22004 CVE-2026-22005 CVE-2026-22009 CVE-2026-22015 CVE-2026-22017 CVE-2026-34270 CVE-2026-34271 CVE-2026-34276 CVE-2026-34303 CVE-2026-34304 CVE-2026-34308 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238 CVE-2026-35239 CVE-2026-35240 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM mecab-0.996-3.module+el9.8.0+24348+9b27f387.4.src.rpm SHA-256: 6996c84f0ced8229961e31654195e23bf28e3c523d84af0b10f4af30d1472662 mecab-ipadic-2.7.0.20070801-24.module+el9.8.0+24348+9b27f387.src.rpm SHA-256: 5a2a33af65b5298f9610bbaff295f371aff3267eb606a0b7f39da45a00d0ee72 mysql-8.4.9-1.module+el9.8.0+24348+9b27f387.src.rpm SHA-256: 8952c351737d1ed3c78b33567d6fed0704c48674962713c2dd97e43de4a487c9 perl-DBD-MySQL-4.053-3.module+el9.8.0+24348+9b27f387.src.rpm SHA-256: e0e34a8d84c866c710a40900f8e5cf9dc1f376cbbc42e0abbc4f136928baa491 rapidjson-1.1.0-19.module+el9.8.0+24348+9b27f387.src.rpm SHA-256: 3f0f0c3741fd75e2f795c8d89da4099d9bd6a5277641f613c4ec9e7c24fe0ccf x86_64 mysql-common-8.4.9-1.module+el9.8.0+24348+9b27f387.noarch.rpm SHA-256: 33a7a39ddb4ef87ff9f5f8d79c191c8683d0ccbef69da5c5eeb7f34f21469dda mysql-errmsg-8.4.9-1.module+el9.8.0+24348+9b27f387.noarch.rpm SHA-256: ac98ecd478c4c4a94ef38e851ecb4b20a2b1b3cb1ab11705550fe0fc741d6cb5 mysql-test-data-8.4.9-1.module+el9.8.0+24348+9b27f387.noarch.rpm SHA-256: af9e8f216adcfe2f41d7ad82d58e747cbd54810c8a143d55f26162b32d57f17f rapidjson-doc-1.1.0-19.module+el9.8.0+24348+9b27f387.noarch.rpm SHA-256: 3fbb83fa534b57b944d743b2373ff4fd79337dacaf24cc27645e4f5ef8f079ee mecab-0.996-3.module+el9.8.0+24348+9b27f387.4.x86_64.rpm SHA-256: df898d0e3a7e58d5d2541a14ce4823cca68ff47a64e085ac387310bcdb7c43c5 mecab-debuginfo-0.996-3.module+el9.8.0+24348+9b27f387.4.x86_64.rpm SHA-256: 049ffa7ca1408f0db55a56c0f9869e67d410db43b6a8aa6612ca6166a2d1c7dc mecab-debugsource-0.996-3.module+el9.8.0+24348+9b27f387.4.x86_64.rpm SHA-256: d1cb5e41f7a64642a050a3d76f7ca01bf39fbb0e128f215edd36ac2352fd4e27 mecab-devel-0.996-3.module+el9.8.0+24348+9b27f387.4.x86_64.rpm SHA-256: aedc763c33e2ee90015d30ce65e57de19847efb7a41b0750ba4b52aad847cab3 mecab-ipadic-2.7.0.20070801-24.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: b019e641d217eba949e4da47b4d144bfb6dd7545fd9a9c809a6210e04ea9fba5 mecab-ipadic-EUCJP-2.7.0.20070801-24.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: c4a9c75c2c9247fb863d79e9c56fac4700bb6a6a1038b6b6abfd02e49523788a mysql-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: 910fb993275b40293593478e1b83a2c5379062e06dadd7d2e3fc2970f943b6ca mysql-debuginfo-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: 4e04df5132c1bb06c526cd35512d5622a93bdcf89c22dede86d830eb1c7cc199 mysql-debugsource-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: a4e5fc9b3b71c143e78e32d641f5badbcefd3e837a1e2c6786669e40355be5cb mysql-devel-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: 317d6318bd73e3c85b1ad50aeb8645f46beac1cbfe8579f60ba8ea0f09905345 mysql-devel-debuginfo-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: 4418957ea682a40c0b548c1c5b2decaf31ac7a7834b7cf2b1d61486faf28b09a mysql-libs-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: f41d5f5a2e7ae55c9db695aca9b398b908920ec7b6c57972e9c6602cf391177f mysql-libs-debuginfo-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: 38089e74f5b386c343bcc4811c4c687c63829dfc5fc28eed5d3b83d8051dbacb mysql-server-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: ccee49ed9d1d3518253bb98631eeafda478e2ad195d2bd674587c311f4fa62e0 mysql-server-debuginfo-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: 2a78ef740b73a75f63c5c2f69dcf7d0b86cb58a3b41b5dd41e9bdbf1b06b1ae5 mysql-test-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: 121d9c74825784f8f0f719c3d48d4618521dbae1f13f35d7fa01e6915c997f19 mysql-test-debuginfo-8.4.9-1.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: f4f2fa28355524edfbba6160d2c8a6ac8ff2adeab3839a65ceb65df59df5bf03 perl-DBD-MySQL-4.053-3.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: ddc8dd1354f7d6917205fb881356f068dfd2887cc4feb21a473d81fcbe9baa7b perl-DBD-MySQL-debuginfo-4.053-3.module+el9.8.0+24348+9b27f387.x86_64.rpm SHA-256: 7a90b7643d09d76f5d2a7c