Linux · Security advisory · June 24, 2026

ELSA-2026-25052: Security update for 15 packages

ELSA-2026-25052, released June 24, 2026, fixes 19 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
19
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0032
25th percentile

Priority of the 19 CVEs

Patch now 0 Urgent 0 High 0 Routine 19

Fixed package versions

ProductReleaseFixed in
mecabol 90:0.996-3.module+el9.8.0+90919+3e0d08f6.4
mecab-develol 90:0.996-3.module+el9.8.0+90919+3e0d08f6.4
mecab-ipadicol 90:2.7.0.20070801-24.0.1.module+el9.8.0+90919+3e0d08f6
mecab-ipadic-EUCJPol 90:2.7.0.20070801-24.0.1.module+el9.8.0+90919+3e0d08f6
mysqlol 90:8.4.9-1.module+el9.8.0+90919+3e0d08f6
mysql-commonol 90:8.4.9-1.module+el9.8.0+90919+3e0d08f6
mysql-develol 90:8.4.9-1.module+el9.8.0+90919+3e0d08f6
mysql-errmsgol 90:8.4.9-1.module+el9.8.0+90919+3e0d08f6
mysql-libsol 90:8.4.9-1.module+el9.8.0+90919+3e0d08f6
mysql-serverol 90:8.4.9-1.module+el9.8.0+90919+3e0d08f6
mysql-testol 90:8.4.9-1.module+el9.8.0+90919+3e0d08f6
mysql-test-dataol 90:8.4.9-1.module+el9.8.0+90919+3e0d08f6
perl-DBD-MySQLol 90:4.053-3.module+el9.8.0+90919+3e0d08f6
rapidjson-develol 90:1.1.0-19.module+el9.8.0+90919+3e0d08f6
rapidjson-docol 90:1.1.0-19.module+el9.8.0+90919+3e0d08f6

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2026-21998 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22002 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22004 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22005 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-34304 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0032 None reported
Routine CVE-2026-22009 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-22017 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34270 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34271 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34276 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34303 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-34308 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0030 None reported
Routine CVE-2026-22001 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0026 None reported
Routine CVE-2026-22015 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35236 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35237 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35238 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35239 mecab: MySQL is a multi-user, multi-threaded SQL database server 6.5 0.0024 None reported
Routine CVE-2026-35240 mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) 6.5 0.0024 None reported
Showing 1 to 19 of 19 1