Moderate Security Update for MySQL: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:25919: Moderate: mysql:8.0 security update. Affects mecab across 2 version ranges.
< 0.996-2.module_el8.6.0+3340+d764b636
< 0.996-2.module_el8.10.0+3965+b415b607
Fixed in 0.996-2.module_el8.6.0+3340+d764b636 or 0.996-2.module_el8.10.0+3965+b415b607, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MySQL is a widely-used multi-user, multi-threaded SQL database server known for its reliability and performance. It includes the MySQL server daemon (mysqld) along with various client programs and libraries. This security update addresses several vulnerabilities that could potentially compromise the integrity and security of MySQL installations, particularly in versions running on AlmaLinux 8.
Vulnerability Detail
The vulnerabilities in MySQL include unspecified issues in InnoDB, Information Schema, Group Replication Plugin, and Optimizer components. These vulnerabilities could allow unauthorized access, data manipulation, or denial of service, impacting the overall security and functionality of the database. The vulnerabilities were identified in the April 2026 Critical Patch Update (CPU) and are cataloged under various CVEs, including CVE-2026-22001 and CVE-2026-22004.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update mecab-
< 0.996-2.module_el8.6.0+3340+d764b6360.996-2.module_el8.6.0+3340+d764b636 -
< 0.996-2.module_el8.10.0+3965+b415b6070.996-2.module_el8.10.0+3965+b415b607
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, consider restricting access to the MySQL server from untrusted networks and implementing strict user permissions to mitigate potential exploitation of these vulnerabilities until the update can be applied.
Conclusion
The recent security update for MySQL addresses multiple vulnerabilities that could compromise database security. It is crucial for users to update their installations promptly to mitigate risks. Utilizing tools like Vulert can help monitor for vulnerabilities effectively.
See every vulnerability recorded for mecab →
FAQ
The vulnerabilities could lead to unauthorized access, data corruption, or denial of service, affecting the reliability of MySQL databases.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software by simply uploading your manifest file.
Yes, you can set up a cron job to regularly check for updates and apply them automatically, ensuring your MySQL installation remains secure.
Implement strict access controls and monitor your database for unusual activity as a temporary measure until you can apply the updates.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the security advisory.
Related vulnerabilities
Recent vulnerabilities recorded for mecab.
