Linux · Security advisory · September 17, 2025
ELSA-2025-16046: Security update for 14 packages
ELSA-2025-16046, released September 17, 2025, fixes 53 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
53
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0144
73rd percentile
Priority of the 53 CVEs
Patch now 0
Urgent 0
High 3
Routine 50
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| mecab | ol 9 | 0:0.996-3.module+el9.6.0+90535+0c73839a.4 |
| mecab-devel | ol 9 | 0:0.996-3.module+el9.6.0+90535+0c73839a.4 |
| mecab-ipadic | ol 9 | 0:2.7.0.20070801-24.0.1.module+el9.6.0+90535+0c73839a |
| mecab-ipadic-EUCJP | ol 9 | 0:2.7.0.20070801-24.0.1.module+el9.6.0+90535+0c73839a |
| mysql | ol 9 | 0:8.4.6-1.module+el9.6.0+90673+e6b08fe8 |
| mysql-common | ol 9 | 0:8.4.6-1.module+el9.6.0+90673+e6b08fe8 |
| mysql-devel | ol 9 | 0:8.4.6-1.module+el9.6.0+90673+e6b08fe8 |
| mysql-errmsg | ol 9 | 0:8.4.6-1.module+el9.6.0+90673+e6b08fe8 |
| mysql-libs | ol 9 | 0:8.4.6-1.module+el9.6.0+90673+e6b08fe8 |
| mysql-server | ol 9 | 0:8.4.6-1.module+el9.6.0+90673+e6b08fe8 |
| mysql-test | ol 9 | 0:8.4.6-1.module+el9.6.0+90673+e6b08fe8 |
| mysql-test-data | ol 9 | 0:8.4.6-1.module+el9.6.0+90673+e6b08fe8 |
| rapidjson-devel | ol 9 | 0:1.1.0-19.module+el9.6.0+90535+0c73839a |
| rapidjson-doc | ol 9 | 0:1.1.0-19.module+el9.6.0+90535+0c73839a |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2025-5399 | curl: Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes l... | 7.5 | 0.0144 | None reported | |
| High | CVE-2025-30693 | mariadb10.11: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) | 7.0 | 0.0098 | None reported | |
| High | CVE-2025-30722 | mariadb10.11: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump) | 7.0 | 0.0050 | None reported | |
| Routine | CVE-2025-21574 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser) | 6.5 | 0.0111 | None reported | |
| Routine | CVE-2025-30705 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS) | 6.5 | 0.0098 | None reported | |
| Routine | CVE-2025-30715 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services) | 6.5 | 0.0098 | None reported | |
| Routine | CVE-2025-21575 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser) | 6.5 | 0.0097 | None reported | |
| Routine | CVE-2025-21588 | libmysqlclient24: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 6.5 | 0.0092 | None reported | |
| Routine | CVE-2025-21581 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-21584 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-21585 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30683 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30684 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30685 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30689 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30696 | mysql-source-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30699 | mysql-client: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure) | 6.5 | 0.0091 | None reported | |
| Routine | CVE-2025-30704 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services) | 6.5 | 0.0084 | None reported | |
| Routine | CVE-2025-30682 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0083 | None reported | |
| Routine | CVE-2025-30687 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0083 | None reported | |
| Routine | CVE-2025-30688 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0083 | None reported | |
| Routine | CVE-2025-21577 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 6.5 | 0.0082 | None reported | |
| Routine | CVE-2025-30681 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 6.5 | 0.0080 | None reported | |
| Routine | CVE-2025-21579 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Options) | 6.5 | 0.0077 | None reported | |
| Routine | CVE-2025-21580 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 6.5 | 0.0077 | None reported |
Showing 1 to 25 of 53
1Next