{
  "fix": "ELSA-2022-6590",
  "url": "https://patchblox.com/security/fix/linux/elsa-2022-6590",
  "summary": "ELSA-2022-6590, released September 22, 2022, fixes 44 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 7 packages",
  "released": "2022-09-22T00:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2022-21457, high severity",
  "supported": true,
  "cveCount": 44,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.02092,
  "maxCvss": 7.8,
  "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2022-6590.html",
  "appliesTo": [
    {
      "product": "mysql",
      "productUrl": "https://patchblox.com/security/product/linux/mysql",
      "release": "ol 9",
      "fixedVersion": "0:8.0.30-3.el9_0",
      "supported": true
    },
    {
      "product": "mysql-common",
      "productUrl": "https://patchblox.com/security/product/linux/mysql-common",
      "release": "ol 9",
      "fixedVersion": "0:8.0.30-3.el9_0",
      "supported": true
    },
    {
      "product": "mysql-devel",
      "productUrl": "https://patchblox.com/security/product/linux/mysql-devel",
      "release": "ol 9",
      "fixedVersion": "0:8.0.30-3.el9_0",
      "supported": true
    },
    {
      "product": "mysql-errmsg",
      "productUrl": "https://patchblox.com/security/product/linux/mysql-errmsg",
      "release": "ol 9",
      "fixedVersion": "0:8.0.30-3.el9_0",
      "supported": true
    },
    {
      "product": "mysql-libs",
      "productUrl": "https://patchblox.com/security/product/linux/mysql-libs",
      "release": "ol 9",
      "fixedVersion": "0:8.0.30-3.el9_0",
      "supported": true
    },
    {
      "product": "mysql-server",
      "productUrl": "https://patchblox.com/security/product/linux/mysql-server",
      "release": "ol 9",
      "fixedVersion": "0:8.0.30-3.el9_0",
      "supported": true
    },
    {
      "product": "mysql-test",
      "productUrl": "https://patchblox.com/security/product/linux/mysql-test",
      "release": "ol 9",
      "fixedVersion": "0:8.0.30-3.el9_0",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2022-21457",
      "url": "https://patchblox.com/security/cve/CVE-2022-21457",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PAM Auth Plugin)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.02092,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21427",
      "url": "https://patchblox.com/security/cve/CVE-2022-21427",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: FTS)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.01996,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21526",
      "url": "https://patchblox.com/security/cve/CVE-2022-21526",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.01852,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21515",
      "url": "https://patchblox.com/security/cve/CVE-2022-21515",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Options)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.01841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21517",
      "url": "https://patchblox.com/security/cve/CVE-2022-21517",
      "title": "mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.01841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21525",
      "url": "https://patchblox.com/security/cve/CVE-2022-21525",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.01841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21537",
      "url": "https://patchblox.com/security/cve/CVE-2022-21537",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.01841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21530",
      "url": "https://patchblox.com/security/cve/CVE-2022-21530",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.01769,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21531",
      "url": "https://patchblox.com/security/cve/CVE-2022-21531",
      "title": "mysql-server-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.01721,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21529",
      "url": "https://patchblox.com/security/cve/CVE-2022-21529",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.01683,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21534",
      "url": "https://patchblox.com/security/cve/CVE-2022-21534",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.01683,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21522",
      "url": "https://patchblox.com/security/cve/CVE-2022-21522",
      "title": "mysql-client: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.01678,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21509",
      "url": "https://patchblox.com/security/cve/CVE-2022-21509",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01651,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21527",
      "url": "https://patchblox.com/security/cve/CVE-2022-21527",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01651,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21528",
      "url": "https://patchblox.com/security/cve/CVE-2022-21528",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01577,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21479",
      "url": "https://patchblox.com/security/cve/CVE-2022-21479",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01554,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21412",
      "url": "https://patchblox.com/security/cve/CVE-2022-21412",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01456,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21417",
      "url": "https://patchblox.com/security/cve/CVE-2022-21417",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01456,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21413",
      "url": "https://patchblox.com/security/cve/CVE-2022-21413",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01421,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21569",
      "url": "https://patchblox.com/security/cve/CVE-2022-21569",
      "title": "mysql-testsuite-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21415",
      "url": "https://patchblox.com/security/cve/CVE-2022-21415",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21556",
      "url": "https://patchblox.com/security/cve/CVE-2022-21556",
      "title": "mysql-source-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01379,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21454",
      "url": "https://patchblox.com/security/cve/CVE-2022-21454",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Group Replication Plugin)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01369,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21414",
      "url": "https://patchblox.com/security/cve/CVE-2022-21414",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01366,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21547",
      "url": "https://patchblox.com/security/cve/CVE-2022-21547",
      "title": "mysql-server: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01364,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21460",
      "url": "https://patchblox.com/security/cve/CVE-2022-21460",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Logging)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21435",
      "url": "https://patchblox.com/security/cve/CVE-2022-21435",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01303,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21437",
      "url": "https://patchblox.com/security/cve/CVE-2022-21437",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01303,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21423",
      "url": "https://patchblox.com/security/cve/CVE-2022-21423",
      "title": "mysql-server-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01279,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21553",
      "url": "https://patchblox.com/security/cve/CVE-2022-21553",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01275,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21444",
      "url": "https://patchblox.com/security/cve/CVE-2022-21444",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01266,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21425",
      "url": "https://patchblox.com/security/cve/CVE-2022-21425",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21478",
      "url": "https://patchblox.com/security/cve/CVE-2022-21478",
      "title": "mysql-source-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21436",
      "url": "https://patchblox.com/security/cve/CVE-2022-21436",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21438",
      "url": "https://patchblox.com/security/cve/CVE-2022-21438",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21452",
      "url": "https://patchblox.com/security/cve/CVE-2022-21452",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21462",
      "url": "https://patchblox.com/security/cve/CVE-2022-21462",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21451",
      "url": "https://patchblox.com/security/cve/CVE-2022-21451",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.01232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21418",
      "url": "https://patchblox.com/security/cve/CVE-2022-21418",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01096,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21440",
      "url": "https://patchblox.com/security/cve/CVE-2022-21440",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01086,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21459",
      "url": "https://patchblox.com/security/cve/CVE-2022-21459",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01086,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21455",
      "url": "https://patchblox.com/security/cve/CVE-2022-21455",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PAM Auth Plugin)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.01057,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21539",
      "url": "https://patchblox.com/security/cve/CVE-2022-21539",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.2,
      "epss": 0.00971,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21538",
      "url": "https://patchblox.com/security/cve/CVE-2022-21538",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Security: Encryption)",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.2,
      "epss": 0.00792,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}