Linux · Security advisory · May 26, 2026

ALSA-2026:20693: Security update for 8 packages

ALSA-2026:20693, released May 26, 2026, fixes 19 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
19
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0032
25th percentile

Priority of the 19 CVEs

Patch now 0 Urgent 0 High 0 Routine 19

Fixed package versions

ProductReleaseFixed in
mysql8.4almalinux 108.4.9-1.el10_2.alma.1
mysql8.4-commonalmalinux 108.4.9-1.el10_2.alma.1
mysql8.4-develalmalinux 108.4.9-1.el10_2.alma.1
mysql8.4-errmsgalmalinux 108.4.9-1.el10_2.alma.1
mysql8.4-libsalmalinux 108.4.9-1.el10_2.alma.1
mysql8.4-serveralmalinux 108.4.9-1.el10_2.alma.1
mysql8.4-testalmalinux 108.4.9-1.el10_2.alma.1
mysql8.4-test-dataalmalinux 108.4.9-1.el10_2.alma.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2026-21998 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22002 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22004 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22005 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-34304 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22009 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-22017 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34270 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34271 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34276 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34303 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34308 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-22001 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0026 None reported
Routine CVE-2026-22015 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35236 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35237 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35238 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35239 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35240 mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) 6.5 0.0024 None reported
Showing 1 to 19 of 19 1