{
  "fix": "ALSA-2022:6443",
  "url": "https://patchblox.com/security/fix/linux/alsa-2022-6443",
  "summary": "ALSA-2022:6443, released September 13, 2022, fixes 35 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 15 packages",
  "released": "2022-09-13T00:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2022-27387, high severity",
  "supported": true,
  "cveCount": 35,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.02458,
  "maxCvss": 7.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/ALSA-2022:6443",
  "appliesTo": [
    {
      "product": "Judy",
      "productUrl": "https://patchblox.com/security/product/linux/judy",
      "release": "almalinux 8",
      "fixedVersion": "1.0.5-18.module_el8.6.0\u002B3139\u002B3c630e87",
      "supported": true
    },
    {
      "product": "galera",
      "productUrl": "https://patchblox.com/security/product/linux/galera",
      "release": "almalinux 8",
      "fixedVersion": "25.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-backup",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-backup",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-common",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-common",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-devel",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-embedded",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-embedded",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-embedded-devel",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-embedded-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-errmsg",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-errmsg",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-gssapi-server",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-gssapi-server",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-oqgraph-engine",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-oqgraph-engine",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-server",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-server",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-server-galera",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-server-galera",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-server-utils",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-server-utils",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    },
    {
      "product": "mariadb-test",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-test",
      "release": "almalinux 8",
      "fixedVersion": "3:10.3.35-1.module_el8.6.0\u002B3265\u002B230ed96b",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2022-27387",
      "url": "https://patchblox.com/security/cve/CVE-2022-27387",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46669",
      "url": "https://patchblox.com/security/cve/CVE-2021-46669",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.02423,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27378",
      "url": "https://patchblox.com/security/cve/CVE-2022-27378",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27377",
      "url": "https://patchblox.com/security/cve/CVE-2022-27377",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02337,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27379",
      "url": "https://patchblox.com/security/cve/CVE-2022-27379",
      "title": "mariadb-plugin-gssapi-client: An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to al...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27380",
      "url": "https://patchblox.com/security/cve/CVE-2022-27380",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27386",
      "url": "https://patchblox.com/security/cve/CVE-2022-27386",
      "title": "mariadb-server-core-10.3: MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27447",
      "url": "https://patchblox.com/security/cve/CVE-2022-27447",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27449",
      "url": "https://patchblox.com/security/cve/CVE-2022-27449",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27376",
      "url": "https://patchblox.com/security/cve/CVE-2022-27376",
      "title": "libmariadbd19: MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, wh...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27381",
      "url": "https://patchblox.com/security/cve/CVE-2022-27381",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27384",
      "url": "https://patchblox.com/security/cve/CVE-2022-27384",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27452",
      "url": "https://patchblox.com/security/cve/CVE-2022-27452",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27445",
      "url": "https://patchblox.com/security/cve/CVE-2022-27445",
      "title": "mariadb-backup: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27448",
      "url": "https://patchblox.com/security/cve/CVE-2022-27448",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27383",
      "url": "https://patchblox.com/security/cve/CVE-2022-27383",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27456",
      "url": "https://patchblox.com/security/cve/CVE-2022-27456",
      "title": "mariadb-plugin-mroonga: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32085",
      "url": "https://patchblox.com/security/cve/CVE-2022-32085",
      "title": "mariadb-server-utils: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32088",
      "url": "https://patchblox.com/security/cve/CVE-2022-32088",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32083",
      "url": "https://patchblox.com/security/cve/CVE-2022-32083",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02007,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21427",
      "url": "https://patchblox.com/security/cve/CVE-2022-21427",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: FTS)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.01996,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32087",
      "url": "https://patchblox.com/security/cve/CVE-2022-32087",
      "title": "libmariadb3: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.01788,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-24048",
      "url": "https://patchblox.com/security/cve/CVE-2022-24048",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00694,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-24052",
      "url": "https://patchblox.com/security/cve/CVE-2022-24052",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00694,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-24051",
      "url": "https://patchblox.com/security/cve/CVE-2022-24051",
      "title": "mariadb-server-utils: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00662,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-24050",
      "url": "https://patchblox.com/security/cve/CVE-2022-24050",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00644,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46659",
      "url": "https://patchblox.com/security/cve/CVE-2021-46659",
      "title": "mariadb-backup: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00556,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46661",
      "url": "https://patchblox.com/security/cve/CVE-2021-46661",
      "title": "mariadb-pam: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.\nThe following packa...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46663",
      "url": "https://patchblox.com/security/cve/CVE-2021-46663",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46664",
      "url": "https://patchblox.com/security/cve/CVE-2021-46664",
      "title": "mariadb: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46665",
      "url": "https://patchblox.com/security/cve/CVE-2021-46665",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46668",
      "url": "https://patchblox.com/security/cve/CVE-2021-46668",
      "title": "mariadb-server: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-31623",
      "url": "https://patchblox.com/security/cve/CVE-2022-31623",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-31622",
      "url": "https://patchblox.com/security/cve/CVE-2022-31622",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27458",
      "url": "https://patchblox.com/security/cve/CVE-2022-27458",
      "title": "libmariadb3: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}