Important: mysql:8.0 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535) * krb5: GSS message token handling (CVE-2024-37371) * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264) * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238) * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241) * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231) * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236) * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237) * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203) * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212) * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199) * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193) * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198) * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239) * curl: curl netrc password leak (CVE-2024-11053) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497) * mysql: MySQL Server Options Vulnerability (CVE-2025-21520) * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555) * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491) * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501) * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519) * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559) * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523) * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535) * krb5: GSS message token handling (CVE-2024-37371) * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264) * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238) * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241) * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231) * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236) * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237) * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203) * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212) * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199) * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193) * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198) * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239) * curl: curl netrc password leak (CVE-2024-11053) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497) * mysql: MySQL Server Options Vulnerability (CVE-2025-21520) * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555) * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491) * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501) * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519) * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559) * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523) * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
05 / REFERENCES
Further evidence
- https://access.redhat.com/errata/RHSA-2025:1673
- https://access.redhat.com/security/cve/CVE-2024-11053
- https://access.redhat.com/security/cve/CVE-2024-21193
- https://access.redhat.com/security/cve/CVE-2024-21194
- https://access.redhat.com/security/cve/CVE-2024-21196
- https://access.redhat.com/security/cve/CVE-2024-21197
- https://access.redhat.com/security/cve/CVE-2024-21198
- https://access.redhat.com/security/cve/CVE-2024-21199
- https://access.redhat.com/security/cve/CVE-2024-21201
- https://access.redhat.com/security/cve/CVE-2024-21203
- https://access.redhat.com/security/cve/CVE-2024-21212
- https://access.redhat.com/security/cve/CVE-2024-21213
- https://access.redhat.com/security/cve/CVE-2024-21218
- https://access.redhat.com/security/cve/CVE-2024-21219
- https://access.redhat.com/security/cve/CVE-2024-21230
- https://access.redhat.com/security/cve/CVE-2024-21231
- https://access.redhat.com/security/cve/CVE-2024-21236
- https://access.redhat.com/security/cve/CVE-2024-21237
- https://access.redhat.com/security/cve/CVE-2024-21238
- https://access.redhat.com/security/cve/CVE-2024-21239
- https://access.redhat.com/security/cve/CVE-2024-21241
- https://access.redhat.com/security/cve/CVE-2024-21247
- https://access.redhat.com/security/cve/CVE-2024-37371
- https://access.redhat.com/security/cve/CVE-2024-5535
- https://access.redhat.com/security/cve/CVE-2024-7264
- https://access.redhat.com/security/cve/CVE-2025-21490
- https://access.redhat.com/security/cve/CVE-2025-21491
- https://access.redhat.com/security/cve/CVE-2025-21494
- https://access.redhat.com/security/cve/CVE-2025-21497
- https://access.redhat.com/security/cve/CVE-2025-21500
- https://access.redhat.com/security/cve/CVE-2025-21501
- https://access.redhat.com/security/cve/CVE-2025-21503
- https://access.redhat.com/security/cve/CVE-2025-21504
- https://access.redhat.com/security/cve/CVE-2025-21505
- https://access.redhat.com/security/cve/CVE-2025-21518
- https://access.redhat.com/security/cve/CVE-2025-21519
- https://access.redhat.com/security/cve/CVE-2025-21520
- https://access.redhat.com/security/cve/CVE-2025-21521
- https://access.redhat.com/security/cve/CVE-2025-21522
- https://access.redhat.com/security/cve/CVE-2025-21523
- https://access.redhat.com/security/cve/CVE-2025-21525
- https://access.redhat.com/security/cve/CVE-2025-21529
- https://access.redhat.com/security/cve/CVE-2025-21531
- https://access.redhat.com/security/cve/CVE-2025-21534
- https://access.redhat.com/security/cve/CVE-2025-21536
- https://access.redhat.com/security/cve/CVE-2025-21540
- https://access.redhat.com/security/cve/CVE-2025-21543
- https://access.redhat.com/security/cve/CVE-2025-21546
- https://access.redhat.com/security/cve/CVE-2025-21555
- https://access.redhat.com/security/cve/CVE-2025-21559
- https://bugzilla.redhat.com/2294581
- https://bugzilla.redhat.com/2294676
- https://bugzilla.redhat.com/2301888
- https://bugzilla.redhat.com/2318857
- https://bugzilla.redhat.com/2318858
- https://bugzilla.redhat.com/2318870
- https://bugzilla.redhat.com/2318873
- https://bugzilla.redhat.com/2318874
- https://bugzilla.redhat.com/2318876
- https://bugzilla.redhat.com/2318882
- https://bugzilla.redhat.com/2318883
- https://bugzilla.redhat.com/2318884
- https://bugzilla.redhat.com/2318885
- https://bugzilla.redhat.com/2318886
- https://bugzilla.redhat.com/2318897
- https://bugzilla.redhat.com/2318900
- https://bugzilla.redhat.com/2318905
- https://bugzilla.redhat.com/2318914
- https://bugzilla.redhat.com/2318922
- https://bugzilla.redhat.com/2318923
- https://bugzilla.redhat.com/2318925
- https://bugzilla.redhat.com/2318926
- https://bugzilla.redhat.com/2318927
- https://bugzilla.redhat.com/2331191
- https://bugzilla.redhat.com/2339218
- https://bugzilla.redhat.com/2339220
- https://bugzilla.redhat.com/2339221
- https://bugzilla.redhat.com/2339226
- https://bugzilla.redhat.com/2339231
- https://bugzilla.redhat.com/2339236
- https://bugzilla.redhat.com/2339238
- https://bugzilla.redhat.com/2339243
- https://bugzilla.redhat.com/2339247
- https://bugzilla.redhat.com/2339252
- https://bugzilla.redhat.com/2339259
- https://bugzilla.redhat.com/2339266
- https://bugzilla.redhat.com/2339270
- https://bugzilla.redhat.com/2339271
- https://bugzilla.redhat.com/2339275
- https://bugzilla.redhat.com/2339277
- https://bugzilla.redhat.com/2339281
- https://bugzilla.redhat.com/2339284
- https://bugzilla.redhat.com/2339291
- https://bugzilla.redhat.com/2339293
- https://bugzilla.redhat.com/2339295
- https://bugzilla.redhat.com/2339299
- https://bugzilla.redhat.com/2339300
- https://bugzilla.redhat.com/2339304
- https://bugzilla.redhat.com/2339305
- https://errata.almalinux.org/8/ALSA-2025-1673.html