{
  "fix": "RHSA-2022:5948",
  "url": "https://patchblox.com/security/fix/linux/rhsa-2022-5948",
  "summary": "RHSA-2022:5948, released August 9, 2022, fixes 42 CVEs across 16 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 16 packages",
  "released": "2022-08-09T00:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2022-27387, high severity",
  "supported": true,
  "cveCount": 42,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.02458,
  "maxCvss": 7.8,
  "vendorAdvisory": "https://access.redhat.com/errata/RHSA-2022:5948",
  "appliesTo": [
    {
      "product": "galera",
      "productUrl": "https://patchblox.com/security/product/linux/galera",
      "release": "RHEL 9",
      "fixedVersion": "0:26.4.11-1.el9_0",
      "supported": true
    },
    {
      "product": "mariadb",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-backup",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-backup",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-common",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-common",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-devel",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-embedded",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-embedded",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-embedded-devel",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-embedded-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-errmsg",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-errmsg",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-gssapi-server",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-gssapi-server",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-oqgraph-engine",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-oqgraph-engine",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-pam",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-pam",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-server",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-server",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-server-galera",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-server-galera",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-server-utils",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-server-utils",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mariadb-test",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-test",
      "release": "RHEL 9",
      "fixedVersion": "3:10.5.16-2.el9_0",
      "supported": true
    },
    {
      "product": "mysql-selinux",
      "productUrl": "https://patchblox.com/security/product/linux/mysql-selinux",
      "release": "RHEL 9",
      "fixedVersion": "0:1.0.5-1.el9_0",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2022-27387",
      "url": "https://patchblox.com/security/cve/CVE-2022-27387",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46669",
      "url": "https://patchblox.com/security/cve/CVE-2021-46669",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.02423,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27378",
      "url": "https://patchblox.com/security/cve/CVE-2022-27378",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27377",
      "url": "https://patchblox.com/security/cve/CVE-2022-27377",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02337,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27379",
      "url": "https://patchblox.com/security/cve/CVE-2022-27379",
      "title": "mariadb-plugin-gssapi-client: An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to al...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27380",
      "url": "https://patchblox.com/security/cve/CVE-2022-27380",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27386",
      "url": "https://patchblox.com/security/cve/CVE-2022-27386",
      "title": "mariadb-server-core-10.3: MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27447",
      "url": "https://patchblox.com/security/cve/CVE-2022-27447",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27449",
      "url": "https://patchblox.com/security/cve/CVE-2022-27449",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27376",
      "url": "https://patchblox.com/security/cve/CVE-2022-27376",
      "title": "libmariadbd19: MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, wh...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27381",
      "url": "https://patchblox.com/security/cve/CVE-2022-27381",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27384",
      "url": "https://patchblox.com/security/cve/CVE-2022-27384",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27452",
      "url": "https://patchblox.com/security/cve/CVE-2022-27452",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27445",
      "url": "https://patchblox.com/security/cve/CVE-2022-27445",
      "title": "mariadb-backup: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27448",
      "url": "https://patchblox.com/security/cve/CVE-2022-27448",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27383",
      "url": "https://patchblox.com/security/cve/CVE-2022-27383",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27456",
      "url": "https://patchblox.com/security/cve/CVE-2022-27456",
      "title": "mariadb-plugin-mroonga: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32085",
      "url": "https://patchblox.com/security/cve/CVE-2022-32085",
      "title": "mariadb-server-utils: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32088",
      "url": "https://patchblox.com/security/cve/CVE-2022-32088",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32083",
      "url": "https://patchblox.com/security/cve/CVE-2022-32083",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.02007,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32087",
      "url": "https://patchblox.com/security/cve/CVE-2022-32087",
      "title": "libmariadb3: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.01788,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27451",
      "url": "https://patchblox.com/security/cve/CVE-2022-27451",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.\n\nThe following pack...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27457",
      "url": "https://patchblox.com/security/cve/CVE-2022-27457",
      "title": "libmariadbd19: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /str...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.01663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27446",
      "url": "https://patchblox.com/security/cve/CVE-2022-27446",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.\n\nThe following pack...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01579,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27455",
      "url": "https://patchblox.com/security/cve/CVE-2022-27455",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.\n\nThe following pack...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01564,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32086",
      "url": "https://patchblox.com/security/cve/CVE-2022-32086",
      "title": "mariadb-backup: MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.0156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27382",
      "url": "https://patchblox.com/security/cve/CVE-2022-27382",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.\n\nThe following pack...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01546,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27444",
      "url": "https://patchblox.com/security/cve/CVE-2022-27444",
      "title": "mariadb-gssapi-server: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.\n\nThe following pack...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21595",
      "url": "https://patchblox.com/security/cve/CVE-2022-21595",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component: CAPI)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.01365,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-24048",
      "url": "https://patchblox.com/security/cve/CVE-2022-24048",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00694,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-24052",
      "url": "https://patchblox.com/security/cve/CVE-2022-24052",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00694,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-24051",
      "url": "https://patchblox.com/security/cve/CVE-2022-24051",
      "title": "mariadb-server-utils: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00662,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-24050",
      "url": "https://patchblox.com/security/cve/CVE-2022-24050",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00644,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46659",
      "url": "https://patchblox.com/security/cve/CVE-2021-46659",
      "title": "mariadb-backup: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00556,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46661",
      "url": "https://patchblox.com/security/cve/CVE-2021-46661",
      "title": "mariadb-pam: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.\nThe following packa...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46663",
      "url": "https://patchblox.com/security/cve/CVE-2021-46663",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46664",
      "url": "https://patchblox.com/security/cve/CVE-2021-46664",
      "title": "mariadb: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46665",
      "url": "https://patchblox.com/security/cve/CVE-2021-46665",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46668",
      "url": "https://patchblox.com/security/cve/CVE-2021-46668",
      "title": "mariadb-server: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-31623",
      "url": "https://patchblox.com/security/cve/CVE-2022-31623",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-31622",
      "url": "https://patchblox.com/security/cve/CVE-2022-31622",
      "title": "galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27458",
      "url": "https://patchblox.com/security/cve/CVE-2022-27458",
      "title": "libmariadb3: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T12:40:37Z"
}