Linux · Security advisory · March 24, 2026
ALSA-2026:5640: Security update for 14 packages
ALSA-2026:5640, released March 24, 2026, fixes 6 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: Routine.
Routine
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0040
34th percentile
Priority of the 6 CVEs
Patch now 0
Urgent 0
High 0
Routine 6
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| mecab | almalinux 9 | 0.996-3.module_el9.6.0+152+8cbce00c.4 |
| mecab-devel | almalinux 9 | 0.996-3.module_el9.6.0+152+8cbce00c.4 |
| mecab-ipadic | almalinux 9 | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c |
| mecab-ipadic-EUCJP | almalinux 9 | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c |
| mysql | almalinux 9 | 8.4.8-1.module_el9.7.0+219+aca48cd3 |
| mysql-common | almalinux 9 | 8.4.8-1.module_el9.7.0+219+aca48cd3 |
| mysql-devel | almalinux 9 | 8.4.8-1.module_el9.7.0+219+aca48cd3 |
| mysql-errmsg | almalinux 9 | 8.4.8-1.module_el9.7.0+219+aca48cd3 |
| mysql-libs | almalinux 9 | 8.4.8-1.module_el9.7.0+219+aca48cd3 |
| mysql-server | almalinux 9 | 8.4.8-1.module_el9.7.0+219+aca48cd3 |
| mysql-test | almalinux 9 | 8.4.8-1.module_el9.7.0+219+aca48cd3 |
| mysql-test-data | almalinux 9 | 8.4.8-1.module_el9.7.0+219+aca48cd3 |
| rapidjson-devel | almalinux 9 | 1.1.0-19.module_el9.6.0+152+8cbce00c |
| rapidjson-doc | almalinux 9 | 1.1.0-19.module_el9.6.0+152+8cbce00c |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Routine | CVE-2026-21964 | mysql8.4: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling) | 6.5 | 0.0040 | None reported | |
| Routine | CVE-2026-21936 | mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) | 6.5 | 0.0040 | None reported | |
| Routine | CVE-2026-21937 | libmysqlclient24: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) | 6.5 | 0.0040 | None reported | |
| Routine | CVE-2026-21941 | mysql8.4: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) | 6.5 | 0.0040 | None reported | |
| Routine | CVE-2026-21948 | mysql8.4: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) | 6.5 | 0.0040 | None reported | |
| Routine | CVE-2026-21968 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 6.5 | 0.0031 | None reported |
Showing 1 to 6 of 6
1