Linux · Security advisory · September 11, 2025
ALSA-2025:15699: Security update for 4 packages
ALSA-2025:15699, released September 11, 2025, fixes 53 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
53
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0144
73rd percentile
Priority of the 53 CVEs
Patch now 0
Urgent 0
High 3
Routine 50
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| mysql-selinux | almalinux 10 | 1.0.14-1.el10_0 |
| mysql8.4-common | almalinux 10 | 8.4.6-2.el10_0 |
| mysql8.4-errmsg | almalinux 10 | 8.4.6-2.el10_0 |
| mysql8.4-test-data | almalinux 10 | 8.4.6-2.el10_0 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2025-5399 | curl: Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes l... | 7.5 | 0.0144 | None reported | |
| High | CVE-2025-30693 | mariadb10.11: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) | 7.0 | 0.0098 | None reported | |
| High | CVE-2025-30722 | mariadb10.11: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump) | 7.0 | 0.0050 | None reported | |
| Routine | CVE-2025-21574 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser) | 6.5 | 0.0111 | None reported | |
| Routine | CVE-2025-30705 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS) | 6.5 | 0.0098 | None reported | |
| Routine | CVE-2025-30715 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services) | 6.5 | 0.0098 | None reported | |
| Routine | CVE-2025-21575 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser) | 6.5 | 0.0097 | None reported | |
| Routine | CVE-2025-21588 | libmysqlclient24: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 6.5 | 0.0092 | None reported | |
| Routine | CVE-2025-21581 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-21584 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-21585 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30683 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30684 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30685 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30689 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30696 | mysql-source-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30699 | mysql-client: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30704 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services) | 6.5 | 0.0084 | None reported | |
| Routine | CVE-2025-30682 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0083 | None reported | |
| Routine | CVE-2025-30687 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0083 | None reported | |
| Routine | CVE-2025-30688 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0083 | None reported | |
| Routine | CVE-2025-21577 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 6.5 | 0.0082 | None reported | |
| Routine | CVE-2025-30681 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0080 | None reported | |
| Routine | CVE-2025-21579 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Options) | 6.5 | 0.0077 | None reported | |
| Routine | CVE-2025-21580 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 6.5 | 0.0077 | None reported |
Showing 1 to 25 of 53
1Next