Linux · Security advisory · September 17, 2025
ALSA-2025:16046: Security update for 14 packages
ALSA-2025:16046, released September 17, 2025, fixes 53 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
53
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0144
73rd percentile
Priority of the 53 CVEs
Patch now 0
Urgent 0
High 3
Routine 50
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| mecab | almalinux 9 | 0.996-3.module_el9.6.0+152+8cbce00c.4 |
| mecab-devel | almalinux 9 | 0.996-3.module_el9.6.0+152+8cbce00c.4 |
| mecab-ipadic | almalinux 9 | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c |
| mecab-ipadic-EUCJP | almalinux 9 | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c |
| mysql | almalinux 9 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| mysql-common | almalinux 9 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| mysql-devel | almalinux 9 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| mysql-errmsg | almalinux 9 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| mysql-libs | almalinux 9 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| mysql-server | almalinux 9 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| mysql-test | almalinux 9 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| mysql-test-data | almalinux 9 | 8.4.6-1.module_el9.6.0+180+a4e757e5 |
| rapidjson-devel | almalinux 9 | 1.1.0-19.module_el9.6.0+152+8cbce00c |
| rapidjson-doc | almalinux 9 | 1.1.0-19.module_el9.6.0+152+8cbce00c |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2025-5399 | curl: Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes l... | 7.5 | 0.0144 | None reported | |
| High | CVE-2025-30693 | mariadb10.11: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) | 7.0 | 0.0098 | None reported | |
| High | CVE-2025-30722 | mariadb10.11: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump) | 7.0 | 0.0050 | None reported | |
| Routine | CVE-2025-21574 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser) | 6.5 | 0.0111 | None reported | |
| Routine | CVE-2025-30705 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS) | 6.5 | 0.0098 | None reported | |
| Routine | CVE-2025-30715 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services) | 6.5 | 0.0098 | None reported | |
| Routine | CVE-2025-21575 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser) | 6.5 | 0.0097 | None reported | |
| Routine | CVE-2025-21588 | libmysqlclient24: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 6.5 | 0.0092 | None reported | |
| Routine | CVE-2025-21581 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-21584 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-21585 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30683 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30684 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30685 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30689 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30696 | mysql-source-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30699 | mysql-client: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30704 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services) | 6.5 | 0.0084 | None reported | |
| Routine | CVE-2025-30682 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0083 | None reported | |
| Routine | CVE-2025-30687 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0083 | None reported | |
| Routine | CVE-2025-30688 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0083 | None reported | |
| Routine | CVE-2025-21577 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 6.5 | 0.0082 | None reported | |
| Routine | CVE-2025-30681 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0080 | None reported | |
| Routine | CVE-2025-21579 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Options) | 6.5 | 0.0077 | None reported | |
| Routine | CVE-2025-21580 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 6.5 | 0.0077 | None reported |
Showing 1 to 25 of 53
1Next