Linux · Security advisory · August 9, 2022
ALSA-2022:5948: Security update for 14 packages
ALSA-2022:5948, released August 9, 2022, fixes 36 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
36
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0246
84th percentile
Priority of the 36 CVEs
Patch now 0
Urgent 0
High 36
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| mariadb | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-backup | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-common | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-devel | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-embedded | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-embedded-devel | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-errmsg | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-gssapi-server | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-oqgraph-engine | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-pam | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-server | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-server-galera | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-server-utils | almalinux 9 | 3:10.5.16-2.el9_0 |
| mariadb-test | almalinux 9 | 3:10.5.16-2.el9_0 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-27387 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0246 | None reported | |
| High | CVE-2021-46669 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0242 | None reported | |
| High | CVE-2022-27378 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0241 | None reported | |
| High | CVE-2022-27377 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0234 | None reported | |
| High | CVE-2022-27379 | mariadb-plugin-gssapi-client: An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to al... | 7.8 | 0.0226 | None reported | |
| High | CVE-2022-27380 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0226 | None reported | |
| High | CVE-2022-27386 | mariadb-server-core-10.3: MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc. | 7.8 | 0.0226 | None reported | |
| High | CVE-2022-27447 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0225 | None reported | |
| High | CVE-2022-27449 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0223 | None reported | |
| High | CVE-2022-27376 | libmariadbd19: MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, wh... | 7.8 | 0.0220 | None reported | |
| High | CVE-2022-27381 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0219 | None reported | |
| High | CVE-2022-27384 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0219 | None reported | |
| High | CVE-2022-27452 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0219 | None reported | |
| High | CVE-2022-27445 | mariadb-backup: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0217 | None reported | |
| High | CVE-2022-27448 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0215 | None reported | |
| High | CVE-2022-27383 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0213 | None reported | |
| High | CVE-2022-27456 | mariadb-plugin-mroonga: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_... | 7.8 | 0.0213 | None reported | |
| High | CVE-2022-27451 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following pack... | 7.8 | 0.0166 | None reported | |
| High | CVE-2022-27457 | libmariadbd19: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /str... | 7.8 | 0.0166 | None reported | |
| High | CVE-2022-27446 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following pack... | 7.8 | 0.0158 | None reported | |
| High | CVE-2022-27455 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following pack... | 7.8 | 0.0156 | None reported | |
| High | CVE-2022-27382 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following pack... | 7.8 | 0.0155 | None reported | |
| High | CVE-2022-27444 | mariadb-gssapi-server: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following pack... | 7.8 | 0.0149 | None reported | |
| High | CVE-2022-24048 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0069 | None reported | |
| High | CVE-2022-24052 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0069 | None reported |
Showing 1 to 25 of 36
1Next