Linux · Security advisory · September 13, 2022
RHSA-2022:6443: Security update for 15 packages
RHSA-2022:6443, released September 13, 2022, fixes 36 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
36
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0246
84th percentile
Priority of the 36 CVEs
Patch now 0
Urgent 0
High 36
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| Judy | RHEL 8 | 0:1.0.5-18.module+el8+2765+cfa4f87b |
| galera | RHEL 8 | 0:25.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-backup | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-common | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-devel | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-embedded | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-embedded-devel | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-errmsg | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-gssapi-server | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-oqgraph-engine | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-server | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-server-galera | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-server-utils | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
| mariadb-test | RHEL 8 | 3:10.3.35-1.module+el8.6.0+15949+4ba4ec26 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-27387 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0246 | None reported | |
| High | CVE-2021-46669 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0242 | None reported | |
| High | CVE-2022-27378 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0241 | None reported | |
| High | CVE-2022-27377 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0234 | None reported | |
| High | CVE-2022-27379 | mariadb-plugin-gssapi-client: An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to al... | 7.8 | 0.0226 | None reported | |
| High | CVE-2022-27380 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0226 | None reported | |
| High | CVE-2022-27386 | mariadb-server-core-10.3: MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc. | 7.8 | 0.0226 | None reported | |
| High | CVE-2022-27447 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0225 | None reported | |
| High | CVE-2022-27449 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0223 | None reported | |
| High | CVE-2022-27376 | libmariadbd19: MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, wh... | 7.8 | 0.0220 | None reported | |
| High | CVE-2022-27381 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0219 | None reported | |
| High | CVE-2022-27384 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0219 | None reported | |
| High | CVE-2022-27452 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0219 | None reported | |
| High | CVE-2022-27445 | mariadb-backup: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0217 | None reported | |
| High | CVE-2022-27448 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0215 | None reported | |
| High | CVE-2022-27383 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0213 | None reported | |
| High | CVE-2022-27456 | mariadb-plugin-mroonga: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_... | 7.8 | 0.0213 | None reported | |
| High | CVE-2022-32085 | mariadb-server-utils: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0202 | None reported | |
| High | CVE-2022-32088 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0202 | None reported | |
| High | CVE-2022-32083 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0201 | None reported | |
| High | CVE-2022-21427 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: FTS) | 7.8 | 0.0200 | None reported | |
| High | CVE-2022-32087 | libmariadb3: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args. | 7.8 | 0.0179 | None reported | |
| High | CVE-2022-21595 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component: CAPI) | 7.8 | 0.0137 | None reported | |
| High | CVE-2022-24048 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0069 | None reported | |
| High | CVE-2022-24052 | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 7.8 | 0.0069 | None reported |
Showing 1 to 25 of 36
1Next