Linux · Security advisory · August 2, 2022

RHSA-2022:5826: Security update for 16 packages

RHSA-2022:5826, released August 2, 2022, fixes 42 CVEs across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
42
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0246
84th percentile

Priority of the 42 CVEs

Patch now 0 Urgent 0 High 42 Routine 0

Fixed package versions

ProductReleaseFixed in
JudyRHEL 80:1.0.5-18.module+el8.4.0+9031+9abc7af9
galeraRHEL 80:26.4.11-1.module+el8.6.0+15639+405b7427
mariadbRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-backupRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-commonRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-develRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-embeddedRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-embedded-develRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-errmsgRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-gssapi-serverRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-oqgraph-engineRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-pamRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-serverRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-server-galeraRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-server-utilsRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427
mariadb-testRHEL 83:10.5.16-2.module+el8.6.0+15639+405b7427

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-27387 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0246 None reported
High CVE-2021-46669 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0242 None reported
High CVE-2022-27378 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0241 None reported
High CVE-2022-27377 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0234 None reported
High CVE-2022-27379 mariadb-plugin-gssapi-client: An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to al... 7.8 0.0226 None reported
High CVE-2022-27380 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0226 None reported
High CVE-2022-27386 mariadb-server-core-10.3: MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc. 7.8 0.0226 None reported
High CVE-2022-27447 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0225 None reported
High CVE-2022-27449 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0223 None reported
High CVE-2022-27376 libmariadbd19: MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, wh... 7.8 0.0220 None reported
High CVE-2022-27381 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0219 None reported
High CVE-2022-27384 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0219 None reported
High CVE-2022-27452 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0219 None reported
High CVE-2022-27445 mariadb-backup: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0217 None reported
High CVE-2022-27448 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0215 None reported
High CVE-2022-27383 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0213 None reported
High CVE-2022-27456 mariadb-plugin-mroonga: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_... 7.8 0.0213 None reported
High CVE-2022-32085 mariadb-server-utils: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0202 None reported
High CVE-2022-32088 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0202 None reported
High CVE-2022-32083 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 7.8 0.0201 None reported
High CVE-2022-32087 libmariadb3: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args. 7.8 0.0179 None reported
High CVE-2022-27451 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following pack... 7.8 0.0166 None reported
High CVE-2022-27457 libmariadbd19: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /str... 7.8 0.0166 None reported
High CVE-2022-27446 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following pack... 7.8 0.0158 None reported
High CVE-2022-27455 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following pack... 7.8 0.0156 None reported
Showing 1 to 25 of 42 1Next