Linux · Security advisory · November 5, 2025

ELSA-2025-19584: Security update for 15 packages

ELSA-2025-19584, released November 5, 2025, fixes 5 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0127
70th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
galeraol 90:26.4.22-1.el9_6
mariadbol 93:10.5.29-2.el9_6
mariadb-backupol 93:10.5.29-2.el9_6
mariadb-commonol 93:10.5.29-2.el9_6
mariadb-develol 93:10.5.29-2.el9_6
mariadb-embeddedol 93:10.5.29-2.el9_6
mariadb-embedded-develol 93:10.5.29-2.el9_6
mariadb-errmsgol 93:10.5.29-2.el9_6
mariadb-gssapi-serverol 93:10.5.29-2.el9_6
mariadb-oqgraph-engineol 93:10.5.29-2.el9_6
mariadb-pamol 93:10.5.29-2.el9_6
mariadb-serverol 93:10.5.29-2.el9_6
mariadb-server-galeraol 93:10.5.29-2.el9_6
mariadb-server-utilsol 93:10.5.29-2.el9_6
mariadb-testol 93:10.5.29-2.el9_6

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-21490 libmariadb3: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) 7.5 0.0127 None reported
High CVE-2025-30693 mariadb10.11: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) 7.0 0.0098 None reported
High CVE-2025-30722 mariadb10.11: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump) 7.0 0.0050 None reported
High CVE-2023-52969 mariadb: This update for mariadb fixes the following issues: Update to version 10.11.14. Security issues fixed: - CVE-2025-... 7.0 0.0047 None reported
High CVE-2023-52970 mariadb: This update for mariadb fixes the following issues: Update to version 10.11.14. Security issues fixed: - CVE-2025-... 7.0 0.0046 None reported
Showing 1 to 5 of 5 1