Linux · Security advisory · September 11, 2025

ELSA-2025-15699: Security update for 9 packages

ELSA-2025-15699, released September 11, 2025, fixes 53 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0144

73rd percentile

Priority of the 53 CVEs

Patch now 0
                                Urgent 0
                                High 3
                                Routine 50

Fixed package versions

Product	Release	Fixed in
mysql-selinux	ol 10	0:1.0.14-1.el10_0
mysql8.4	ol 10	0:8.4.6-2.el10_0
mysql8.4-common	ol 10	0:8.4.6-2.el10_0
mysql8.4-devel	ol 10	0:8.4.6-2.el10_0
mysql8.4-errmsg	ol 10	0:8.4.6-2.el10_0
mysql8.4-libs	ol 10	0:8.4.6-2.el10_0
mysql8.4-server	ol 10	0:8.4.6-2.el10_0
mysql8.4-test	ol 10	0:8.4.6-2.el10_0
mysql8.4-test-data	ol 10	0:8.4.6-2.el10_0

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2025-5399	curl: Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes l...	7.5	0.0144	None reported
High	CVE-2025-30693	mariadb10.11: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)	7.0	0.0098	None reported
High	CVE-2025-30722	mariadb10.11: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump)	7.0	0.0050	None reported
Routine	CVE-2025-21574	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser)	6.5	0.0111	None reported
Routine	CVE-2025-30705	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS)	6.5	0.0098	None reported
Routine	CVE-2025-30715	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services)	6.5	0.0098	None reported
Routine	CVE-2025-21575	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser)	6.5	0.0097	None reported
Routine	CVE-2025-21588	libmysqlclient24: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML)	6.5	0.0092	None reported
Routine	CVE-2025-21581	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0091	None reported
Routine	CVE-2025-21584	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL)	6.5	0.0091	None reported
Routine	CVE-2025-21585	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0091	None reported
Routine	CVE-2025-30683	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)	6.5	0.0091	None reported
Routine	CVE-2025-30684	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)	6.5	0.0091	None reported
Routine	CVE-2025-30685	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)	6.5	0.0091	None reported
Routine	CVE-2025-30689	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0091	None reported
Routine	CVE-2025-30696	mysql-source-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS)	6.5	0.0091	None reported
Routine	CVE-2025-30699	mysql-client: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure)	6.5	0.0091	None reported
Routine	CVE-2025-30704	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services)	6.5	0.0084	None reported
Routine	CVE-2025-30682	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0083	None reported
Routine	CVE-2025-30687	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0083	None reported
Routine	CVE-2025-30688	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0083	None reported
Routine	CVE-2025-21577	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	6.5	0.0082	None reported
Routine	CVE-2025-30681	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)	6.5	0.0080	None reported
Routine	CVE-2025-21579	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Options)	6.5	0.0077	None reported
Routine	CVE-2025-21580	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML)	6.5	0.0077	None reported

Also fixes CVE-2025-5399

SUSE-SU-2025:03198-1
curl on opensuse-leap 15.6, sles 15.6, sles 15.7
RLSA-2025:15699
mysql-selinux, mysql8.4 on rocky 10
ALSA-2025:16046
mecab, mecab-devel, mecab-ipadic and 11 more on almalinux 9
ELSA-2025-16046
mecab, mecab-devel, mecab-ipadic and 11 more on ol 9
ALSA-2025:15699
mysql-selinux, mysql8.4-common, mysql8.4-errmsg and 1 more on almalinux 10
DEBIAN-CVE-2025-5399
curl on Debian 13.5 (trixie), Debian 14

Vendor advisory

https://linux.oracle.com/errata/ELSA-2025-15699.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo