# ALSA-2022:1557: Security update for 16 packages ALSA-2022:1557, released April 26, 2022, fixes 14 CVEs across 16 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alsa-2022-1557 - Platform: Linux - Released: Apr 26, 2022 - Priority: High (Closes CVE-2021-2389, high severity) - CVEs: 14, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/ALSA-2022:1557 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Judy](https://patchblox.com/security/data/product/linux/judy.md) | almalinux 8 | 1.0.5-18.module_el8.6.0+2867+72759d2f | | [galera](https://patchblox.com/security/data/product/linux/galera.md) | almalinux 8 | 26.4.9-4.module_el8.6.0+2761+593e5e59 | | [mariadb](https://patchblox.com/security/data/product/linux/mariadb.md) | almalinux 8 | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | | [mariadb-backup](https://patchblox.com/security/data/product/linux/mariadb-backup.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | | [mariadb-common](https://patchblox.com/security/data/product/linux/mariadb-common.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | | [mariadb-devel](https://patchblox.com/security/data/product/linux/mariadb-devel.md) | almalinux 8 | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | | [mariadb-embedded](https://patchblox.com/security/data/product/linux/mariadb-embedded.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | | [mariadb-embedded-devel](https://patchblox.com/security/data/product/linux/mariadb-embedded-devel.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | | [mariadb-errmsg](https://patchblox.com/security/data/product/linux/mariadb-errmsg.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | | [mariadb-gssapi-server](https://patchblox.com/security/data/product/linux/mariadb-gssapi-server.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | | [mariadb-oqgraph-engine](https://patchblox.com/security/data/product/linux/mariadb-oqgraph-engine.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | | [mariadb-pam](https://patchblox.com/security/data/product/linux/mariadb-pam.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | | [mariadb-server](https://patchblox.com/security/data/product/linux/mariadb-server.md) | almalinux 8 | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | | [mariadb-server-galera](https://patchblox.com/security/data/product/linux/mariadb-server-galera.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | | [mariadb-server-utils](https://patchblox.com/security/data/product/linux/mariadb-server-utils.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | | [mariadb-test](https://patchblox.com/security/data/product/linux/mariadb-test.md) | almalinux 8 | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2021-2389](https://patchblox.com/security/data/cve/CVE-2021-2389.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0815 | | | [CVE-2021-2166](https://patchblox.com/security/data/cve/CVE-2021-2166.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 7.5 | 0.0491 | | | [CVE-2021-2372](https://patchblox.com/security/data/cve/CVE-2021-2372.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0303 | | | [CVE-2021-35604](https://patchblox.com/security/data/cve/CVE-2021-35604.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0266 | | | [CVE-2021-2154](https://patchblox.com/security/data/cve/CVE-2021-2154.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0260 | | | [CVE-2022-27385](https://patchblox.com/security/data/cve/CVE-2022-27385.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0166 | | | [CVE-2022-21451](https://patchblox.com/security/data/cve/CVE-2022-21451.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0123 | | | [CVE-2021-46667](https://patchblox.com/security/data/cve/CVE-2021-46667.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0043 | | | [CVE-2021-46662](https://patchblox.com/security/data/cve/CVE-2021-46662.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0039 | | | [CVE-2021-46666](https://patchblox.com/security/data/cve/CVE-2021-46666.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0039 | | | [CVE-2021-46657](https://patchblox.com/security/data/cve/CVE-2021-46657.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0039 | | | [CVE-2021-46658](https://patchblox.com/security/data/cve/CVE-2021-46658.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0039 | | | [CVE-2022-31621](https://patchblox.com/security/data/cve/CVE-2022-31621.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0022 | | | [CVE-2022-31624](https://patchblox.com/security/data/cve/CVE-2022-31624.md) | High | mariadb-test-data: MariaDB Server before 10.7 is vulnerable to Denial of Service | 7.5 | 0.0022 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo