Linux · Security advisory · May 16, 2023
ALSA-2023:3087: Security update for 11 packages
ALSA-2023:3087, released May 16, 2023, fixes 42 CVEs across 11 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
42
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.4340
98th percentile
Priority of the 42 CVEs
Patch now 0
Urgent 0
High 42
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| mecab | almalinux 8 | 0.996-2.module_el8.6.0+3340+d764b636 |
| mecab-devel | almalinux 8 | 0.996-2.module_el8.6.0+3340+d764b636 |
| mecab-ipadic | almalinux 8 | 2.7.0.20070801-16.module_el8.6.0+3340+d764b636 |
| mecab-ipadic-EUCJP | almalinux 8 | 2.7.0.20070801-16.module_el8.6.0+3340+d764b636 |
| mysql | almalinux 8 | 8.0.32-1.module_el8.8.0+3567+56a616e4 |
| mysql-common | almalinux 8 | 8.0.32-1.module_el8.8.0+3567+56a616e4 |
| mysql-devel | almalinux 8 | 8.0.32-1.module_el8.8.0+3567+56a616e4 |
| mysql-errmsg | almalinux 8 | 8.0.32-1.module_el8.8.0+3567+56a616e4 |
| mysql-libs | almalinux 8 | 8.0.32-1.module_el8.8.0+3567+56a616e4 |
| mysql-server | almalinux 8 | 8.0.32-1.module_el8.8.0+3567+56a616e4 |
| mysql-test | almalinux 8 | 8.0.32-1.module_el8.8.0+3567+56a616e4 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2023-21887 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: GIS) | 7.5 | 0.4340 | None reported | |
| High | CVE-2022-21608 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0174 | None reported | |
| High | CVE-2022-21617 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Connection Handling) | 7.5 | 0.0174 | None reported | |
| High | CVE-2022-39408 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0153 | None reported | |
| High | CVE-2022-39410 | mysql-testsuite-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) | 7.5 | 0.0153 | None reported | |
| High | CVE-2023-21875 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Security: Encryption) | 7.5 | 0.0152 | None reported | |
| High | CVE-2022-21594 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0148 | None reported | |
| High | CVE-2022-21599 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure) | 7.5 | 0.0148 | None reported | |
| High | CVE-2022-21604 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) | 7.5 | 0.0148 | None reported | |
| High | CVE-2022-21632 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Security: Privileges) | 7.5 | 0.0148 | None reported | |
| High | CVE-2022-21633 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 7.5 | 0.0148 | None reported | |
| High | CVE-2022-21637 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0146 | None reported | |
| High | CVE-2022-21640 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0146 | None reported | |
| High | CVE-2022-39400 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0146 | None reported | |
| High | CVE-2022-21625 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0135 | None reported | |
| High | CVE-2023-21912 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Security: Privileges) | 7.5 | 0.0117 | None reported | |
| High | CVE-2023-21864 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0116 | None reported | |
| High | CVE-2023-21865 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0116 | None reported | |
| High | CVE-2023-21913 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0113 | None reported | |
| High | CVE-2023-21917 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0113 | None reported | |
| High | CVE-2023-22015 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0105 | None reported | |
| High | CVE-2023-22028 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0105 | None reported | |
| High | CVE-2023-21874 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Thread Pooling) | 7.5 | 0.0104 | None reported | |
| High | CVE-2023-22026 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0103 | None reported | |
| High | CVE-2023-21963 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Connection Handling) | 7.5 | 0.0100 | None reported |
Showing 1 to 25 of 42
1Next