Linux · Security advisory · September 20, 2022

RLSA-2022:6590: mysql security update

RLSA-2022:6590, released September 20, 2022, fixes 52 CVEs in mysql (version 0:8.0.30-3.el9_0). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0209

81st percentile

Priority of the 52 CVEs

Patch now 0
                                Urgent 0
                                High 52
                                Routine 0

Fixed package versions

Product	Release	Fixed in
mysql	rocky 9	0:8.0.30-3.el9_0

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2022-21457	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PAM Auth Plugin)	7.2	0.0209	None reported
High	CVE-2022-21427	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: FTS)	7.8	0.0200	None reported
High	CVE-2022-21526	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0185	None reported
High	CVE-2022-21515	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Options)	7.2	0.0184	None reported
High	CVE-2022-21517	mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	7.2	0.0184	None reported
High	CVE-2022-21525	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0184	None reported
High	CVE-2022-21537	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	7.2	0.0184	None reported
High	CVE-2022-21530	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0177	None reported
High	CVE-2022-21531	mysql-server-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0172	None reported
High	CVE-2022-21529	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0168	None reported
High	CVE-2022-21534	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure)	7.2	0.0168	None reported
High	CVE-2022-21522	mysql-client: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure)	7.2	0.0168	None reported
High	CVE-2022-21509	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0165	None reported
High	CVE-2022-21527	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0165	None reported
High	CVE-2022-21528	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0158	None reported
High	CVE-2022-21479	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0155	None reported
High	CVE-2022-21412	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0146	None reported
High	CVE-2022-21417	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	7.2	0.0146	None reported
High	CVE-2022-21413	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML)	7.2	0.0142	None reported
High	CVE-2022-21569	mysql-testsuite-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)	7.2	0.0141	None reported
High	CVE-2022-21415	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)	7.2	0.0138	None reported
High	CVE-2022-21556	mysql-source-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)	7.2	0.0138	None reported
High	CVE-2022-21454	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Group Replication Plugin)	7.2	0.0137	None reported
High	CVE-2022-21414	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	7.2	0.0137	None reported
High	CVE-2022-21547	mysql-server: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated)	7.2	0.0136	None reported

Also fixes CVE-2022-21457

ALSA-2022:7119
mecab, mecab-ipadic, mecab-ipadic-EUCJP and 7 more on almalinux 8
RHSA-2022:7119
mecab, mecab-ipadic, mecab-ipadic-EUCJP and 7 more on RHEL 8
RLSA-2022:7119
mecab, mecab-ipadic, mysql on rocky 8
ELSA-2022-7119
mecab, mecab-ipadic, mecab-ipadic-EUCJP and 7 more on ol 8
RHSA-2022:6590
mysql, mysql-common, mysql-devel and 4 more on RHEL 9
ELSA-2022-6590
mysql, mysql-common, mysql-devel and 4 more on ol 9
ALSA-2022:6590
mysql, mysql-common, mysql-devel and 4 more on almalinux 9
libmysqlclient21 8.0.29-0ubuntu1
libmysqlclient21 on Ubuntu 24.10 (oracular)

Vendor advisory

https://errata.rockylinux.org/RLSA-2022:6590

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo