Skip to content
OpenAdvisories
High ALSA-2025:1673 49 CVEs

Important: mysql:8.0 security update

Published Feb 19, 2025 · Updated Oct 29, 2026

Summary

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
* krb5: GSS message token handling (CVE-2024-37371)
* curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
* mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
* mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
* mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
* mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
* mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
* mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
* mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
* mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
* mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
* mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
* mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
* curl: curl netrc password leak (CVE-2024-11053)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
* mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
* mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
* mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
* mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
* mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
* mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
* mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
* mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
* mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 13

ReleasePackageFixed in
AlmaLinux · 8 mecab 0.996-2.module_el8.10.0+3965+b415b607
AlmaLinux · 8 mecab 0.996-2.module_el8.6.0+3340+d764b636
AlmaLinux · 8 mecab-devel 0.996-2.module_el8.10.0+3965+b415b607
AlmaLinux · 8 mecab-devel 0.996-2.module_el8.6.0+3340+d764b636
AlmaLinux · 8 mecab-ipadic 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
AlmaLinux · 8 mecab-ipadic-EUCJP 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
AlmaLinux · 8 mysql 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux · 8 mysql-common 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux · 8 mysql-devel 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux · 8 mysql-errmsg 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux · 8 mysql-libs 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux · 8 mysql-server 8.0.41-1.module_el8.10.0+3965+b415b607
AlmaLinux · 8 mysql-test 8.0.41-1.module_el8.10.0+3965+b415b607

Vulnerabilities 49

References

  • report
    https://access.redhat.com/security/cve/CVE-2024-11053
  • report
    https://access.redhat.com/security/cve/CVE-2024-21193
  • report
    https://access.redhat.com/security/cve/CVE-2024-21194
  • report
    https://access.redhat.com/security/cve/CVE-2024-21196
  • report
    https://access.redhat.com/security/cve/CVE-2024-21197
  • report
    https://access.redhat.com/security/cve/CVE-2024-21198
  • report
    https://access.redhat.com/security/cve/CVE-2024-21199
  • report
    https://access.redhat.com/security/cve/CVE-2024-21201
  • report
    https://access.redhat.com/security/cve/CVE-2024-21203
  • report
    https://access.redhat.com/security/cve/CVE-2024-21212
  • report
    https://access.redhat.com/security/cve/CVE-2024-21213
  • report
    https://access.redhat.com/security/cve/CVE-2024-21218
  • report
    https://access.redhat.com/security/cve/CVE-2024-21219
  • report
    https://access.redhat.com/security/cve/CVE-2024-21230
  • report
    https://access.redhat.com/security/cve/CVE-2024-21231
  • report
    https://access.redhat.com/security/cve/CVE-2024-21236
  • report
    https://access.redhat.com/security/cve/CVE-2024-21237
  • report
    https://access.redhat.com/security/cve/CVE-2024-21238
  • report
    https://access.redhat.com/security/cve/CVE-2024-21239
  • report
    https://access.redhat.com/security/cve/CVE-2024-21241
  • report
    https://access.redhat.com/security/cve/CVE-2024-21247
  • report
    https://access.redhat.com/security/cve/CVE-2024-37371
  • report
    https://access.redhat.com/security/cve/CVE-2024-5535
  • report
    https://access.redhat.com/security/cve/CVE-2024-7264
  • report
    https://access.redhat.com/security/cve/CVE-2025-21490
  • report
    https://access.redhat.com/security/cve/CVE-2025-21491
  • report
    https://access.redhat.com/security/cve/CVE-2025-21494
  • report
    https://access.redhat.com/security/cve/CVE-2025-21497
  • report
    https://access.redhat.com/security/cve/CVE-2025-21500
  • report
    https://access.redhat.com/security/cve/CVE-2025-21501
  • report
    https://access.redhat.com/security/cve/CVE-2025-21503
  • report
    https://access.redhat.com/security/cve/CVE-2025-21504
  • report
    https://access.redhat.com/security/cve/CVE-2025-21505
  • report
    https://access.redhat.com/security/cve/CVE-2025-21518
  • report
    https://access.redhat.com/security/cve/CVE-2025-21519
  • report
    https://access.redhat.com/security/cve/CVE-2025-21520
  • report
    https://access.redhat.com/security/cve/CVE-2025-21521
  • report
    https://access.redhat.com/security/cve/CVE-2025-21522
  • report
    https://access.redhat.com/security/cve/CVE-2025-21523