# ELSA-2022-6590: Security update for 7 packages

ELSA-2022-6590, released September 22, 2022, fixes 44 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/elsa-2022-6590
- Platform: Linux
- Released: Sep 22, 2022
- Priority: High (Closes CVE-2022-21457, high severity)
- CVEs: 44, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2022-6590.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [mysql](https://patchblox.com/security/data/product/linux/mysql.md) | ol 9 | 0:8.0.30-3.el9_0 |
| [mysql-common](https://patchblox.com/security/data/product/linux/mysql-common.md) | ol 9 | 0:8.0.30-3.el9_0 |
| [mysql-devel](https://patchblox.com/security/data/product/linux/mysql-devel.md) | ol 9 | 0:8.0.30-3.el9_0 |
| [mysql-errmsg](https://patchblox.com/security/data/product/linux/mysql-errmsg.md) | ol 9 | 0:8.0.30-3.el9_0 |
| [mysql-libs](https://patchblox.com/security/data/product/linux/mysql-libs.md) | ol 9 | 0:8.0.30-3.el9_0 |
| [mysql-server](https://patchblox.com/security/data/product/linux/mysql-server.md) | ol 9 | 0:8.0.30-3.el9_0 |
| [mysql-test](https://patchblox.com/security/data/product/linux/mysql-test.md) | ol 9 | 0:8.0.30-3.el9_0 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-21457](https://patchblox.com/security/data/cve/CVE-2022-21457.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PAM Auth Plugin) | 7.2 | 0.0209 |  |
| [CVE-2022-21427](https://patchblox.com/security/data/cve/CVE-2022-21427.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: FTS) | 7.8 | 0.0200 |  |
| [CVE-2022-21526](https://patchblox.com/security/data/cve/CVE-2022-21526.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0185 |  |
| [CVE-2022-21515](https://patchblox.com/security/data/cve/CVE-2022-21515.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Options) | 7.2 | 0.0184 |  |
| [CVE-2022-21517](https://patchblox.com/security/data/cve/CVE-2022-21517.md) | High | mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.2 | 0.0184 |  |
| [CVE-2022-21525](https://patchblox.com/security/data/cve/CVE-2022-21525.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0184 |  |
| [CVE-2022-21537](https://patchblox.com/security/data/cve/CVE-2022-21537.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.2 | 0.0184 |  |
| [CVE-2022-21530](https://patchblox.com/security/data/cve/CVE-2022-21530.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0177 |  |
| [CVE-2022-21531](https://patchblox.com/security/data/cve/CVE-2022-21531.md) | High | mysql-server-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0172 |  |
| [CVE-2022-21529](https://patchblox.com/security/data/cve/CVE-2022-21529.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0168 |  |
| [CVE-2022-21534](https://patchblox.com/security/data/cve/CVE-2022-21534.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure) | 7.2 | 0.0168 |  |
| [CVE-2022-21522](https://patchblox.com/security/data/cve/CVE-2022-21522.md) | High | mysql-client: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure) | 7.2 | 0.0168 |  |
| [CVE-2022-21509](https://patchblox.com/security/data/cve/CVE-2022-21509.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0165 |  |
| [CVE-2022-21527](https://patchblox.com/security/data/cve/CVE-2022-21527.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0165 |  |
| [CVE-2022-21528](https://patchblox.com/security/data/cve/CVE-2022-21528.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0158 |  |
| [CVE-2022-21479](https://patchblox.com/security/data/cve/CVE-2022-21479.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0155 |  |
| [CVE-2022-21412](https://patchblox.com/security/data/cve/CVE-2022-21412.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0146 |  |
| [CVE-2022-21417](https://patchblox.com/security/data/cve/CVE-2022-21417.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.2 | 0.0146 |  |
| [CVE-2022-21413](https://patchblox.com/security/data/cve/CVE-2022-21413.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 7.2 | 0.0142 |  |
| [CVE-2022-21569](https://patchblox.com/security/data/cve/CVE-2022-21569.md) | High | mysql-testsuite-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) | 7.2 | 0.0141 |  |
| [CVE-2022-21415](https://patchblox.com/security/data/cve/CVE-2022-21415.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 7.2 | 0.0138 |  |
| [CVE-2022-21556](https://patchblox.com/security/data/cve/CVE-2022-21556.md) | High | mysql-source-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) | 7.2 | 0.0138 |  |
| [CVE-2022-21454](https://patchblox.com/security/data/cve/CVE-2022-21454.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Group Replication Plugin) | 7.2 | 0.0137 |  |
| [CVE-2022-21414](https://patchblox.com/security/data/cve/CVE-2022-21414.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0137 |  |
| [CVE-2022-21547](https://patchblox.com/security/data/cve/CVE-2022-21547.md) | High | mysql-server: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated) | 7.2 | 0.0136 |  |
| [CVE-2022-21460](https://patchblox.com/security/data/cve/CVE-2022-21460.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Logging) | 7.2 | 0.0132 |  |
| [CVE-2022-21435](https://patchblox.com/security/data/cve/CVE-2022-21435.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0130 |  |
| [CVE-2022-21437](https://patchblox.com/security/data/cve/CVE-2022-21437.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0130 |  |
| [CVE-2022-21423](https://patchblox.com/security/data/cve/CVE-2022-21423.md) | High | mysql-server-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.2 | 0.0128 |  |
| [CVE-2022-21553](https://patchblox.com/security/data/cve/CVE-2022-21553.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0128 |  |
| [CVE-2022-21444](https://patchblox.com/security/data/cve/CVE-2022-21444.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 7.2 | 0.0127 |  |
| [CVE-2022-21425](https://patchblox.com/security/data/cve/CVE-2022-21425.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 7.2 | 0.0126 |  |
| [CVE-2022-21478](https://patchblox.com/security/data/cve/CVE-2022-21478.md) | High | mysql-source-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0126 |  |
| [CVE-2022-21436](https://patchblox.com/security/data/cve/CVE-2022-21436.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0125 |  |
| [CVE-2022-21438](https://patchblox.com/security/data/cve/CVE-2022-21438.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0125 |  |
| [CVE-2022-21452](https://patchblox.com/security/data/cve/CVE-2022-21452.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0125 |  |
| [CVE-2022-21462](https://patchblox.com/security/data/cve/CVE-2022-21462.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0125 |  |
| [CVE-2022-21451](https://patchblox.com/security/data/cve/CVE-2022-21451.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0123 |  |
| [CVE-2022-21418](https://patchblox.com/security/data/cve/CVE-2022-21418.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.2 | 0.0110 |  |
| [CVE-2022-21440](https://patchblox.com/security/data/cve/CVE-2022-21440.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0109 |  |
| [CVE-2022-21459](https://patchblox.com/security/data/cve/CVE-2022-21459.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0109 |  |
| [CVE-2022-21455](https://patchblox.com/security/data/cve/CVE-2022-21455.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PAM Auth Plugin) | 7.2 | 0.0106 |  |
| [CVE-2022-21539](https://patchblox.com/security/data/cve/CVE-2022-21539.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.2 | 0.0097 |  |
| [CVE-2022-21538](https://patchblox.com/security/data/cve/CVE-2022-21538.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Security: Encryption) | 7.2 | 0.0079 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo