Linux · Security advisory · May 7, 2025
RLSA-2024:0894: Security update for 3 packages
RLSA-2024:0894, released May 7, 2025, fixes 87 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
87
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0213
82nd percentile
Priority of the 87 CVEs
Patch now 0
Urgent 0
High 87
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| mecab | rocky 8 | 0:0.996-2.module+el8.10.0+1676+9b4b6e24 |
| mecab-ipadic | rocky 8 | 0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24 |
| mysql | rocky 8 | 0:8.0.36-1.module+el8.10.0+1676+9b4b6e24 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2023-22084 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0213 | None reported | |
| High | CVE-2023-22056 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0182 | None reported | |
| High | CVE-2023-22058 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 7.5 | 0.0170 | None reported | |
| High | CVE-2022-4899 | mecab: MySQL is a multi-user, multi-threaded SQL database server | 7.5 | 0.0159 | None reported | |
| High | CVE-2024-20965 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0154 | None reported | |
| High | CVE-2023-21946 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0150 | None reported | |
| High | CVE-2023-21920 | mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0147 | None reported | |
| High | CVE-2023-21919 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 7.5 | 0.0146 | None reported | |
| High | CVE-2023-21953 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Partition) | 7.5 | 0.0146 | None reported | |
| High | CVE-2023-21933 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 7.5 | 0.0140 | None reported | |
| High | CVE-2023-21945 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0140 | None reported | |
| High | CVE-2023-21935 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0139 | None reported | |
| High | CVE-2023-21955 | mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Partition) | 7.5 | 0.0139 | None reported | |
| High | CVE-2023-21962 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services) | 7.5 | 0.0139 | None reported | |
| High | CVE-2023-22054 | mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0138 | None reported | |
| High | CVE-2023-22057 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 7.5 | 0.0138 | None reported | |
| High | CVE-2023-21911 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0137 | None reported | |
| High | CVE-2023-21947 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services) | 7.5 | 0.0137 | None reported | |
| High | CVE-2023-22053 | mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component:Client programs) | 7.5 | 0.0133 | None reported | |
| High | CVE-2023-22008 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0132 | None reported | |
| High | CVE-2023-22046 | mysql-client-core-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0132 | None reported | |
| High | CVE-2023-21940 | mysql-server-core-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services) | 7.5 | 0.0129 | None reported | |
| High | CVE-2023-22005 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication) | 7.5 | 0.0129 | None reported | |
| High | CVE-2023-21929 | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 7.5 | 0.0128 | None reported | |
| High | CVE-2023-22033 | mysql-testsuite-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0123 | None reported |
Showing 1 to 25 of 87
1Next