Linux · Security advisory · October 27, 2022
ELSA-2022-7119: Security update for 10 packages
ELSA-2022-7119, released October 27, 2022, fixes 112 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
112
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0332
88th percentile
Priority of the 112 CVEs
Patch now 0
Urgent 0
High 112
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| mecab | ol 8 | 0:0.996-2.module+el8.6.0+20849+f637f661 |
| mecab-ipadic | ol 8 | 0:2.7.0.20070801-16.0.1.module+el8.0.0+5253+1dce7bb2 |
| mecab-ipadic-EUCJP | ol 8 | 0:2.7.0.20070801-16.0.1.module+el8.0.0+5253+1dce7bb2 |
| mysql | ol 8 | 0:8.0.30-1.module+el8.6.0+20849+f637f661 |
| mysql-common | ol 8 | 0:8.0.30-1.module+el8.6.0+20849+f637f661 |
| mysql-devel | ol 8 | 0:8.0.30-1.module+el8.6.0+20849+f637f661 |
| mysql-errmsg | ol 8 | 0:8.0.30-1.module+el8.6.0+20849+f637f661 |
| mysql-libs | ol 8 | 0:8.0.30-1.module+el8.6.0+20849+f637f661 |
| mysql-server | ol 8 | 0:8.0.30-1.module+el8.6.0+20849+f637f661 |
| mysql-test | ol 8 | 0:8.0.30-1.module+el8.6.0+20849+f637f661 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-2478 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 7.2 | 0.0332 | None reported | |
| High | CVE-2021-35604 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0266 | None reported | |
| High | CVE-2021-2479 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 7.2 | 0.0265 | None reported | |
| High | CVE-2021-35546 | mecab: MySQL is a multi-user, multi-threaded SQL database server | 7.2 | 0.0265 | None reported | |
| High | CVE-2021-35597 | libmysqlclient21: Vulnerability in the MySQL Client product of Oracle MySQL (component: CAPI) | 7.2 | 0.0259 | None reported | |
| High | CVE-2021-35591 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 7.2 | 0.0251 | None reported | |
| High | CVE-2021-35577 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0250 | None reported | |
| High | CVE-2021-35596 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Error Handling) | 7.2 | 0.0250 | None reported | |
| High | CVE-2021-35607 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 7.2 | 0.0244 | None reported | |
| High | CVE-2021-2481 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0235 | None reported | |
| High | CVE-2021-35610 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0229 | None reported | |
| High | CVE-2021-35608 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Group Replication Plugin) | 7.2 | 0.0220 | None reported | |
| High | CVE-2021-35575 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0214 | None reported | |
| High | CVE-2022-21457 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PAM Auth Plugin) | 7.2 | 0.0209 | None reported | |
| High | CVE-2022-21256 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Group Replication Plugin) | 7.2 | 0.0203 | None reported | |
| High | CVE-2021-35638 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0201 | None reported | |
| High | CVE-2022-21427 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: FTS) | 7.8 | 0.0200 | None reported | |
| High | CVE-2022-21253 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0198 | None reported | |
| High | CVE-2021-35637 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS) | 7.2 | 0.0196 | None reported | |
| High | CVE-2021-35628 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0195 | None reported | |
| High | CVE-2021-35631 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: GIS) | 7.2 | 0.0195 | None reported | |
| High | CVE-2021-35634 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0195 | None reported | |
| High | CVE-2021-35635 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0195 | None reported | |
| High | CVE-2021-35636 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0195 | None reported | |
| High | CVE-2021-35641 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.2 | 0.0195 | None reported |
Showing 1 to 25 of 112
1Next