Linux · Security advisory · April 26, 2022

ALSA-2022:1557: Security update for 16 packages

ALSA-2022:1557, released April 26, 2022, fixes 14 CVEs across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
14
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0815
94th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 0 High 14 Routine 0

Fixed package versions

ProductReleaseFixed in
Judyalmalinux 81.0.5-18.module_el8.6.0+2867+72759d2f
galeraalmalinux 826.4.9-4.module_el8.6.0+2761+593e5e59
mariadbalmalinux 83:10.5.13-1.module_el8.5.0+2637+d11efe18
mariadb-backupalmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-commonalmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-develalmalinux 83:10.5.13-1.module_el8.5.0+2637+d11efe18
mariadb-embeddedalmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-embedded-develalmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-errmsgalmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-gssapi-serveralmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-oqgraph-enginealmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-pamalmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-serveralmalinux 83:10.5.13-1.module_el8.5.0+2637+d11efe18
mariadb-server-galeraalmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-server-utilsalmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-testalmalinux 83:10.5.13-1.module_el8.6.0+2761+593e5e59

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-2389 libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) 7.5 0.0815 None reported
High CVE-2021-2166 libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) 7.5 0.0491 None reported
High CVE-2021-2372 libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) 7.5 0.0303 None reported
High CVE-2021-35604 libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) 7.5 0.0266 None reported
High CVE-2021-2154 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.5 0.0260 None reported
High CVE-2022-27385 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.5 0.0166 None reported
High CVE-2022-21451 libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) 7.5 0.0123 None reported
High CVE-2021-46667 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.5 0.0043 None reported
High CVE-2021-46662 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.5 0.0039 None reported
High CVE-2021-46666 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.5 0.0039 None reported
High CVE-2021-46657 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.5 0.0039 None reported
High CVE-2021-46658 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.5 0.0039 None reported
High CVE-2022-31621 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.5 0.0022 None reported
High CVE-2022-31624 mariadb-test-data: MariaDB Server before 10.7 is vulnerable to Denial of Service 7.5 0.0022 None reported
Showing 1 to 14 of 14 1