Skip to content
OpenAdvisories
High RLSA-2025:1673 49 CVEs

Important: mysql:8.0 security update

Published Feb 26, 2025 · Updated Feb 5, 2026

Summary

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

* krb5: GSS message token handling (CVE-2024-37371)

* curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

* mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

* mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

* mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

* mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

* mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

* mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

* mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

* mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

* mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

* mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

* mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

* mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

* curl: curl netrc password leak (CVE-2024-11053)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

* mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

* mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

* mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

* mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

* mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

* mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

* mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

* mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

* mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

* mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

* mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 3

ReleasePackageFixed in
Rocky Linux · 8 mecab 0:0.996-2.module+el8.10.0+1676+9b4b6e24
Rocky Linux · 8 mecab-ipadic 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
Rocky Linux · 8 mysql 0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1

Vulnerabilities 49

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2294581
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2294676
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2301888
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318857
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318858
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318870
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318873
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318874
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318882
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318883
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318884
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318885
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318886
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318897
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318900
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318905
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318922
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318923
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318926
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2318927
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2331191
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339218
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339220
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339221
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339226
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339231
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339236
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339238
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339247
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339252
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339259
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339270
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339271
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339275