# RHSA-2023:5683: Security update for 16 packages

RHSA-2023:5683, released October 12, 2023, fixes 8 CVEs across 16 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/rhsa-2023-5683
- Platform: Linux
- Released: Oct 12, 2023
- Priority: High (Closes CVE-2022-32091, high severity)
- CVEs: 8, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://access.redhat.com/errata/RHSA-2023:5683

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Judy](https://patchblox.com/security/data/product/linux/judy.md) | RHEL 8 | 0:1.0.5-18.module+el8.4.0+9031+9abc7af9 |
| [galera](https://patchblox.com/security/data/product/linux/galera.md) | RHEL 8 | 0:26.4.14-1.module+el8.8.0+20134+a92c7654 |
| [mariadb](https://patchblox.com/security/data/product/linux/mariadb.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-backup](https://patchblox.com/security/data/product/linux/mariadb-backup.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-common](https://patchblox.com/security/data/product/linux/mariadb-common.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-devel](https://patchblox.com/security/data/product/linux/mariadb-devel.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-embedded](https://patchblox.com/security/data/product/linux/mariadb-embedded.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-embedded-devel](https://patchblox.com/security/data/product/linux/mariadb-embedded-devel.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-errmsg](https://patchblox.com/security/data/product/linux/mariadb-errmsg.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-gssapi-server](https://patchblox.com/security/data/product/linux/mariadb-gssapi-server.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-oqgraph-engine](https://patchblox.com/security/data/product/linux/mariadb-oqgraph-engine.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-pam](https://patchblox.com/security/data/product/linux/mariadb-pam.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-server](https://patchblox.com/security/data/product/linux/mariadb-server.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-server-galera](https://patchblox.com/security/data/product/linux/mariadb-server-galera.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-server-utils](https://patchblox.com/security/data/product/linux/mariadb-server-utils.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |
| [mariadb-test](https://patchblox.com/security/data/product/linux/mariadb-test.md) | RHEL 8 | 3:10.5.22-1.module+el8.8.0+20134+a92c7654 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-32091](https://patchblox.com/security/data/cve/CVE-2022-32091.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0237 |  |
| [CVE-2022-32084](https://patchblox.com/security/data/cve/CVE-2022-32084.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0228 |  |
| [CVE-2023-5157](https://patchblox.com/security/data/cve/CVE-2023-5157.md) | High | galera-4: A vulnerability was found in MariaDB | 7.5 | 0.0226 |  |
| [CVE-2022-32081](https://patchblox.com/security/data/cve/CVE-2022-32081.md) | High | libmariadb3: MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innob... | 7.5 | 0.0221 |  |
| [CVE-2022-32089](https://patchblox.com/security/data/cve/CVE-2022-32089.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0219 |  |
| [CVE-2022-32082](https://patchblox.com/security/data/cve/CVE-2022-32082.md) | High | mariadb-server: MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc. | 7.5 | 0.0211 |  |
| [CVE-2022-47015](https://patchblox.com/security/data/cve/CVE-2022-47015.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0156 |  |
| [CVE-2022-38791](https://patchblox.com/security/data/cve/CVE-2022-38791.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.5 | 0.0025 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo