Linux · AlmaLinux · Security advisory · January 28, 2025

ALSA-2025:0739: Security update for 16 packages

ALSA-2025:0739, released January 28, 2025, fixes 2 CVEs across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0213
82nd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
Judyalmalinux 81.0.5-18.module_el8.10.0+3947+ac422511
galeraalmalinux 826.4.20-1.module_el8.10.0+3947+ac422511
mariadbalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-backupalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-commonalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-develalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-embeddedalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-embedded-develalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-errmsgalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-gssapi-serveralmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-oqgraph-enginealmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-pamalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-serveralmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-server-galeraalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-server-utilsalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511
mariadb-testalmalinux 83:10.5.27-1.module_el8.10.0+3947+ac422511

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-22084 libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)7.5 0.0213 None reported
Routine CVE-2024-21096 mariadb: This update for mariadb fixes the following issues: - CVE-2024-21096: Fixed mysqldump unspecified vulnerability (bsc...4.9 0.0042 None reported
Showing 1 to 2 of 2 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.