RLSA-2026:23332

Synopsis

Moderate: mysql security update

Description

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)

* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)

* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)

* mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)

* mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)

* mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)

* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)

* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)

* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2460274 2460275 2460276 2460279 2460295 2460312 2460315 2460316 2460323 2460324 2460325 2460326 2460329 2460331 2460335 2460340 2460342 2460344 2460348 2460356 2460358 2460368

CVEs

CVE-2026-21998 CVE-2026-22001 CVE-2026-22002 CVE-2026-22004 CVE-2026-22005 CVE-2026-22009 CVE-2026-22015 CVE-2026-22017 CVE-2026-34267 CVE-2026-34270 CVE-2026-34271 CVE-2026-34276 CVE-2026-34278 CVE-2026-34293 CVE-2026-34303 CVE-2026-34304 CVE-2026-34308 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238 CVE-2026-35239 CVE-2026-35240

Affected packages

Rocky Linux 9 aarch64 - AppStream

mysql-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-0:8.0.46-1.el9_8.rocky.0.1.src.rpm mysql-common-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-debugsource-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-errmsg-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-libs-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-libs-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-server-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-server-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

mysql-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-0:8.0.46-1.el9_8.rocky.0.1.src.rpm mysql-common-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-debugsource-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-errmsg-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-libs-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-libs-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-server-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-server-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

mysql-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-0:8.0.46-1.el9_8.rocky.0.1.src.rpm mysql-common-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-debugsource-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-errmsg-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-libs-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-libs-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-server-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-server-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

mysql-0:8.0.46-1.el9_8.rocky.0.1.src.rpm mysql-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-common-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-debugsource-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-errmsg-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-libs-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-libs-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-server-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-server-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm

Rocky Linux 9 aarch64 - CRB

mysql-devel-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-devel-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-test-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm mysql-test-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.aarch64.rpm

Rocky Linux 9 ppc64le - CRB

mysql-devel-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-devel-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-test-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm mysql-test-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.ppc64le.rpm

Rocky Linux 9 s390x - CRB

mysql-devel-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-devel-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-test-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm mysql-test-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.s390x.rpm

Rocky Linux 9 x86_64 - CRB

mysql-devel-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-devel-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-test-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm mysql-test-debuginfo-0:8.0.46-1.el9_8.rocky.0.1.x86_64.rpm