ALSA-2022:1557: Security update for 16 packages

ALSA-2022:1557, released April 26, 2022, fixes 14 CVEs across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

7.5

Base score, 0 to 10

Highest EPSS

0.0835

94th percentile

Priority of the 14 CVEs

Patch now 0
                                Urgent 0
                                High 14
                                Routine 0

Fixed package versions

Product	Release	Fixed in
Judy	almalinux 8	1.0.5-18.module_el8.6.0+2867+72759d2f
galera	almalinux 8	26.4.9-4.module_el8.6.0+2761+593e5e59
mariadb	almalinux 8	3:10.5.13-1.module_el8.5.0+2637+d11efe18
mariadb-backup	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-common	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-devel	almalinux 8	3:10.5.13-1.module_el8.5.0+2637+d11efe18
mariadb-embedded	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-embedded-devel	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-errmsg	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-gssapi-server	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-oqgraph-engine	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-pam	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-server	almalinux 8	3:10.5.13-1.module_el8.5.0+2637+d11efe18
mariadb-server-galera	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-server-utils	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59
mariadb-test	almalinux 8	3:10.5.13-1.module_el8.6.0+2761+593e5e59

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-2389	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	7.5	0.0835	None reported
High	CVE-2021-2166	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML)	7.5	0.0491	None reported
High	CVE-2021-35604	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	7.5	0.0266	None reported
High	CVE-2021-2154	galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL	7.5	0.0260	None reported
High	CVE-2021-2372	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	7.5	0.0257	None reported
High	CVE-2022-27385	galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL	7.5	0.0166	None reported
High	CVE-2022-21451	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	7.5	0.0123	None reported
High	CVE-2021-46667	galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL	7.5	0.0043	None reported
High	CVE-2021-46662	galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL	7.5	0.0039	None reported
High	CVE-2021-46666	galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL	7.5	0.0039	None reported
High	CVE-2021-46657	galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL	7.5	0.0039	None reported
High	CVE-2021-46658	galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL	7.5	0.0038	None reported
High	CVE-2022-31621	galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL	7.5	0.0022	None reported
High	CVE-2022-31624	mariadb-test-data: MariaDB Server before 10.7 is vulnerable to Denial of Service	7.5	0.0022	None reported

Also fixes CVE-2021-2389

ALAS2023-2023-037
mariadb105, mariadb105-backup, mariadb105-backup-debuginfo and 25 more on amzn 2023
RHSA-2021:3590
mecab, mecab-ipadic, mecab-ipadic-EUCJP and 7 more on RHEL 8
ELSA-2021-3590
mecab, mecab-ipadic, mecab-ipadic-EUCJP and 7 more on ol 8
libmysqlclient21 8.0.26-0ubuntu1
libmysqlclient21 on Ubuntu 22.04.1 LTS (jammy)
mysql-client 8.0.26-0ubuntu1
mysql-client on Ubuntu 22.04.1 LTS (jammy)
mysql-client-8.0 8.0.26-0ubuntu1
mysql-client-8.0 on Ubuntu 22.04.1 LTS (jammy)
mysql-client-core-8.0 8.0.26-0ubuntu1
mysql-client-core-8.0 on Ubuntu 22.04.1 LTS (jammy)
mysql-router 8.0.26-0ubuntu1
mysql-router on Ubuntu 22.04.1 LTS (jammy)

Vendor advisory

https://osv.dev/vulnerability/ALSA-2022:1557

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/alsa-2022-1557">ALSA-2022:1557 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.