Linux · Security advisory · July 16, 2026

ELSA-2026-20693: Security update for 8 packages

ELSA-2026-20693, released July 16, 2026, fixes 19 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
19
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0032
25th percentile

Priority of the 19 CVEs

Patch now 0 Urgent 0 High 0 Routine 19

Fixed package versions

ProductReleaseFixed in
mysql8.4ol 100:8.4.9-1.el10_2
mysql8.4-commonol 100:8.4.9-1.el10_2
mysql8.4-develol 100:8.4.9-1.el10_2
mysql8.4-errmsgol 100:8.4.9-1.el10_2
mysql8.4-libsol 100:8.4.9-1.el10_2
mysql8.4-serverol 100:8.4.9-1.el10_2
mysql8.4-testol 100:8.4.9-1.el10_2
mysql8.4-test-dataol 100:8.4.9-1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2026-21998 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22002 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22004 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22005 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-34304 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22009 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-22017 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34270 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34271 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34276 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34303 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34308 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-22001 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0026 None reported
Routine CVE-2026-22015 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35236 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35237 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35238 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35239 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35240 mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) 6.5 0.0024 None reported
Showing 1 to 19 of 19 1