VDB
ALSA-2022%3A5948
ALSA-2022%3A5948
PUBLISHED
CVSS 7.699999809265137 HIGH
Record from OSV · Published August 9, 2022
Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| mariadb-backup | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb-errmsg | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb-test | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb-gssapi-server | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb-server-galera | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb-oqgraph-engine | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb-embedded-devel | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb-server-utils | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb-server | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb-devel | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
| mariadb-pam | AlmaLinux:9 | 3:10.5.16-2.el9_0 |
2 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 4.0
7.699999809265137
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:9 | mariadb-backup | 0 |
| AlmaLinux:9 | mariadb | 0 |
| AlmaLinux:9 | mariadb-errmsg | 0 |
| AlmaLinux:9 | mariadb-gssapi-server | 0 |
| AlmaLinux:9 | mariadb-oqgraph-engine | 0 |
| AlmaLinux:9 | mariadb-pam | 0 |
| AlmaLinux:9 | mariadb-common | 0 |
| AlmaLinux:9 | mariadb-server | 0 |
| AlmaLinux:9 | mariadb-test | 0 |
| AlmaLinux:9 | mariadb-server-utils | 0 |
| AlmaLinux:9 | mariadb-server-galera | 0 |
| AlmaLinux:9 | mariadb-devel | 0 |
| AlmaLinux:9 | mariadb-embedded-devel | 0 |
| AlmaLinux:9 | mariadb-embedded | 0 |
Timeline
- Aug 9, 2022 CVE Published
- Mar 6, 2026 Distribution Patch (2 in total, the first dated here)
- Mar 6, 2026 Security Advisory
- Oct 29, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln ALSA-2022%3A5948
vulnetix vdb fixes ALSA-2022%3A5948Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/ALSA-2022%253A5948/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://access.redhat.com/errata/RHSA-2022:5948 advisory
- https://access.redhat.com/security/cve/CVE-2021-46659 report
- https://access.redhat.com/security/cve/CVE-2021-46661 report
- https://access.redhat.com/security/cve/CVE-2021-46663 report
- https://access.redhat.com/security/cve/CVE-2021-46664 report
- https://access.redhat.com/security/cve/CVE-2021-46665 report
- https://access.redhat.com/security/cve/CVE-2021-46668 report
- https://access.redhat.com/security/cve/CVE-2021-46669 report
- https://access.redhat.com/security/cve/CVE-2022-24048 report
- https://access.redhat.com/security/cve/CVE-2022-24050 report
- https://access.redhat.com/security/cve/CVE-2022-24051 report
- https://access.redhat.com/security/cve/CVE-2022-24052 report
- https://access.redhat.com/security/cve/CVE-2022-27376 report
- https://access.redhat.com/security/cve/CVE-2022-27377 report
- https://access.redhat.com/security/cve/CVE-2022-27378 report
- https://access.redhat.com/security/cve/CVE-2022-27379 report
- https://access.redhat.com/security/cve/CVE-2022-27380 report
- https://access.redhat.com/security/cve/CVE-2022-27381 report
- https://access.redhat.com/security/cve/CVE-2022-27382 report
- https://access.redhat.com/security/cve/CVE-2022-27383 report
…and 54 more