Red Hat Product Errata RHSA-2026:26180 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26180 - Security Advisory Overview Updated Packages Synopsis Moderate: mysql:8.4 security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the mysql:8.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. Security Fix(es): mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004) mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238) mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236) mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304) mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2460274 - CVE-2026-22004 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460275 - CVE-2026-22001 mysql: Information Schema unspecified vulnerability (CPU Apr 2026) BZ - 2460276 - CVE-2026-34271 mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) BZ - 2460279 - CVE-2026-22009 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460295 - CVE-2026-35237 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460312 - CVE-2026-21998 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460315 - CVE-2026-22005 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460316 - CVE-2026-35238 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460323 - CVE-2026-35239 mysql: DML unspecified vulnerability (CPU Apr 2026) BZ - 2460324 - CVE-2026-22002 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460325 - CVE-2026-35236 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460326 - CVE-2026-34308 mysql: JSON unspecified vulnerability (CPU Apr 2026) BZ - 2460329 - CVE-2026-34303 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460335 - CVE-2026-35240 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460342 - CVE-2026-22017 mysql: Optimizer unspecified vulnerability (CPU Apr 2026) BZ - 2460344 - CVE-2026-34304 mysql: InnoDB unspecified vulnerability (CPU Apr 2026) BZ - 2460348 - CVE-2026-22015 mysql: Information Schema unspecified vulnerability (CPU Apr 2026) BZ - 2460356 - CVE-2026-34276 mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) BZ - 2460358 - CVE-2026-34270 mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) CVEs CVE-2026-21998 CVE-2026-22001 CVE-2026-22002 CVE-2026-22004 CVE-2026-22005 CVE-2026-22009 CVE-2026-22015 CVE-2026-22017 CVE-2026-34270 CVE-2026-34271 CVE-2026-34276 CVE-2026-34303 CVE-2026-34304 CVE-2026-34308 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238 CVE-2026-35239 CVE-2026-35240 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM mecab-0.996-2.module+el8.10.0+23550+bd321b9a.src.rpm SHA-256: e209f6c390e0f6c3fb17a34782741ec82fd2aeb3dab73a6daa7d9dcc11695dfb mecab-ipadic-2.7.0.20070801-17.module+el8.10.0+23550+bd321b9a.src.rpm SHA-256: 875e01540336acc4216c7cc56f20fe5067149b27d4fe4e3e2cd886e78ee72c64 mysql-8.4.9-1.module+el8.10.0+24336+5a933ab6.src.rpm SHA-256: 37c76a8544a5547156899a6b5358ad6b2899b1c4632b0150480dfd9f0324c5c8 x86_64 mecab-0.996-2.module+el8.10.0+23550+bd321b9a.x86_64.rpm SHA-256: d9248c42a6871921271288fe17f29fbb934b79dfe3ffad1f91c754512b49f74a mecab-debuginfo-0.996-2.module+el8.10.0+23550+bd321b9a.x86_64.rpm SHA-256: c34fda233bdde7ab7e475652e91798141d32bbae5afd0b2b9909f8701dc04596 mecab-debugsource-0.996-2.module+el8.10.0+23550+bd321b9a.x86_64.rpm SHA-256: da0127d0e0ec5f7f6d433354e2c0c6e5324a04154695df2f554b9555abe0e4d5 mecab-devel-0.996-2.module+el8.10.0+23550+bd321b9a.x86_64.rpm SHA-256: 43120ec152fc81a71224a2085e36a816097841cda6db65e5964535d5df0313a9 mecab-ipadic-2.7.0.20070801-17.module+el8.10.0+23550+bd321b9a.x86_64.rpm SHA-256: 61cb39fb07bf48cf32eca6798796f94ade8fe26a9e2d193cff1a7cfe00dbb3f0 mecab-ipadic-EUCJP-2.7.0.20070801-17.module+el8.10.0+23550+bd321b9a.x86_64.rpm SHA-256: d9a82a5534b0f18b1e56163ad63712b9d8ea581e660fbaaf2f31ace65eb9f20f mysql-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: c6505b6d592feeb77c2656bf9afd910ac69e3c06c57c3006cd5d12996a4aa9ad mysql-common-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: 0fc36c6890c8ab00a8df89a14f1ddadfd36fd2e30851f2dcc8ede296200a183f mysql-debuginfo-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: e1130551ec21bdbed6c613735ba7a3bb0841307bcb6199d7fd66a7fdde2109dc mysql-debugsource-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: 78fab552b80037ae3344ab0c9cdae67e181e2c22817fd2abbf53b6e5d2dcf52d mysql-devel-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: 8fb33a6f1d1dc058a50176f85f22ade872d9d5f679db27c000bc5e67cdc0f47c mysql-devel-debuginfo-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: f66df5a0d19a6df2ba85de257114c13f856e5b906131937156d791d49235397c mysql-errmsg-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: c9efcdca15d38dced61321178879b5099c8bddf58d835cfbb0dc358f0a8989ef mysql-libs-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: e97407b28920f3bc6a4979c77829bb3aa12cf1cbf2f8046c3e86310a7cc334fc mysql-libs-debuginfo-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: c564b32a5525635f043e26f2fb83a3273868c46302e47193c6125fa96b9dbf06 mysql-server-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: daf7e5ee35ddce0837aa5b7d0dbb2125da02f7278e3ea40cdeaeb13e39a797e0 mysql-server-debuginfo-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: e2db12f8f7dc150ed58f154094f28831cb40d896d879e822aca5a13bf1ea8765 mysql-test-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: 7f97878de23d2fa166f21c455ed7d8278b906403ed4572e86b5d55779867af95 mysql-test-data-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: 4000fdb47ae3d0edac2cc6cc66598fb5b839ae1e0edb81b5d25fb107bebdab0d mysql-test-debuginfo-8.4.9-1.module+el8.10.0+24336+5a933ab6.x86_64.rpm SHA-256: 5ee3d0fd6e661f0d0d59b21730f82e69642a3d54e18d77c75de52a046cbec0a5 mysql-common-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: 0fc36c6890c8ab00a8df89a14f1ddadfd36fd2e30851f2dcc8ede296200a183f mysql-errmsg-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: c9efcdca15d38dced61321178879b5099c8bddf58d835cfbb0dc358f0a8989ef mysql-test-data-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: 4000fdb47ae3d0edac2cc6cc66598fb5b839ae1e0edb81b5d25fb107bebdab0d mysql-common-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: 0fc36c6890c8ab00a8df89a14f1ddadfd36fd2e30851f2dcc8ede296200a183f mysql-errmsg-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: c9efcdca15d38dced61321178879b5099c8bddf58d835cfbb0dc358f0a8989ef mysql-test-data-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: 4000fdb47ae3d0edac2cc6cc66598fb5b839ae1e0edb81b5d25fb107bebdab0d mysql-common-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: 0fc36c6890c8ab00a8df89a14f1ddadfd36fd2e30851f2dcc8ede296200a183f mysql-errmsg-8.4.9-1.module+el8.10.0+24336+5a933ab6.noarch.rpm SHA-256: c9efcdca15d38dced61321178879b5099c8bddf58d835cfbb0dc358f0a8989ef mysql-test-data-8.4.9-1.module+el8.10.0+24336+5a933ab