Linux · Security advisory · June 10, 2026

ALSA-2026:25052: Security update for 15 packages

ALSA-2026:25052, released June 10, 2026, fixes 19 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
19
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0032
25th percentile

Priority of the 19 CVEs

Patch now 0 Urgent 0 High 0 Routine 19

Fixed package versions

ProductReleaseFixed in
mecabalmalinux 90.996-3.module_el9.6.0+152+8cbce00c.4
mecab-develalmalinux 90.996-3.module_el9.6.0+152+8cbce00c.4
mecab-ipadicalmalinux 92.7.0.20070801-24.module_el9.6.0+152+8cbce00c
mecab-ipadic-EUCJPalmalinux 92.7.0.20070801-24.module_el9.6.0+152+8cbce00c
mysqlalmalinux 98.4.9-1.module_el9.8.0+263+ff5e95cf
mysql-commonalmalinux 98.4.9-1.module_el9.8.0+263+ff5e95cf
mysql-develalmalinux 98.4.9-1.module_el9.8.0+263+ff5e95cf
mysql-errmsgalmalinux 98.4.9-1.module_el9.8.0+263+ff5e95cf
mysql-libsalmalinux 98.4.9-1.module_el9.8.0+263+ff5e95cf
mysql-serveralmalinux 98.4.9-1.module_el9.8.0+263+ff5e95cf
mysql-testalmalinux 98.4.9-1.module_el9.8.0+263+ff5e95cf
mysql-test-dataalmalinux 98.4.9-1.module_el9.8.0+263+ff5e95cf
perl-DBD-MySQLalmalinux 94.053-3.module_el9.8.0+235+a38ba90c
rapidjson-develalmalinux 91.1.0-19.module_el9.6.0+152+8cbce00c
rapidjson-docalmalinux 91.1.0-19.module_el9.6.0+152+8cbce00c

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2026-21998 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22002 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22004 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22005 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-34304 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22009 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-22017 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34270 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34271 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34276 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34303 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34308 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-22001 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0026 None reported
Routine CVE-2026-22015 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35236 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35237 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35238 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35239 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35240 mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) 6.5 0.0024 None reported
Showing 1 to 19 of 19 1