Linux · Security advisory · September 17, 2025

ALSA-2025:16086: Security update for 7 packages

ALSA-2025:16086, released September 17, 2025, fixes 51 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0111

66th percentile

Priority of the 51 CVEs

Patch now 0
                                Urgent 0
                                High 2
                                Routine 49

Fixed package versions

Product	Release	Fixed in
mysql	almalinux 9	8.0.43-1.el9_6
mysql-common	almalinux 9	8.0.43-1.el9_6
mysql-devel	almalinux 9	8.0.43-1.el9_6
mysql-errmsg	almalinux 9	8.0.43-1.el9_6
mysql-libs	almalinux 9	8.0.43-1.el9_6
mysql-server	almalinux 9	8.0.43-1.el9_6
mysql-test	almalinux 9	8.0.43-1.el9_6

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2025-30693	mariadb10.11: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)	7.0	0.0098	None reported
High	CVE-2025-30722	mariadb10.11: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump)	7.0	0.0050	None reported
Routine	CVE-2025-21574	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser)	6.5	0.0111	None reported
Routine	CVE-2025-30705	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS)	6.5	0.0098	None reported
Routine	CVE-2025-30715	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services)	6.5	0.0098	None reported
Routine	CVE-2025-21575	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser)	6.5	0.0097	None reported
Routine	CVE-2025-21581	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0091	None reported
Routine	CVE-2025-21584	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL)	6.5	0.0091	None reported
Routine	CVE-2025-21585	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0091	None reported
Routine	CVE-2025-30683	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)	6.5	0.0091	None reported
Routine	CVE-2025-30684	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)	6.5	0.0091	None reported
Routine	CVE-2025-30685	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)	6.5	0.0091	None reported
Routine	CVE-2025-30689	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0091	None reported
Routine	CVE-2025-30696	mysql-source-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS)	6.5	0.0091	None reported
Routine	CVE-2025-30699	mysql-client: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure)	6.5	0.0091	None reported
Routine	CVE-2025-30704	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services)	6.5	0.0084	None reported
Routine	CVE-2025-30682	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0083	None reported
Routine	CVE-2025-30687	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0083	None reported
Routine	CVE-2025-30688	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0083	None reported
Routine	CVE-2025-21577	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	6.5	0.0082	None reported
Routine	CVE-2025-30681	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)	6.5	0.0080	None reported
Routine	CVE-2025-21579	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Options)	6.5	0.0077	None reported
Routine	CVE-2025-21580	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML)	6.5	0.0077	None reported
Routine	CVE-2025-30695	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	6.5	0.0075	None reported
Routine	CVE-2025-50077	Vulnerability in the MySQL Server product of Oracle MySQL	6.5	0.0069	None reported

Also fixes CVE-2025-30693

RHSA-2026:49522
mariadb10.11 on RHEL 10
RLSA-2025:15699
mysql-selinux, mysql8.4 on rocky 10
ALSA-2025:16046
mecab, mecab-devel, mecab-ipadic and 11 more on almalinux 9
ELSA-2025-16046
mecab, mecab-devel, mecab-ipadic and 11 more on ol 9
ALSA-2025:15699
mysql-selinux, mysql8.4-common, mysql8.4-errmsg and 1 more on almalinux 10
ELSA-2025-15699
mysql-selinux, mysql8.4, mysql8.4-common and 6 more on ol 10
RHSA-2026:0247
galera, mariadb, mariadb-backup and 12 more on RHEL 9
ALSA-2026:0247
galera, mariadb, mariadb-backup and 12 more on almalinux 9

Vendor advisory

https://osv.dev/vulnerability/ALSA-2025:16086

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo