Oracle MySQL: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 34

• Critical 9.1
  CVE-2024-37371

  In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handlin…

  krb5 krb5 krb5 krb5 Debian Ubuntu Azure Linux Alpine
  Jun 28, 2024
• High 7.5
  CVE-2025-21521

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jan 21, 2025
• Medium 6.5
  CVE-2025-21500

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 6.5
  CVE-2025-21501

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 6.5
  CVE-2025-21518

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jan 21, 2025
• Medium 6.5
  CVE-2025-21522

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 6.5
  CVE-2025-21566

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 6.4
  CVE-2025-21548

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that ar…

  Oracle MySQL Connectors mysql-connector-python Ubuntu
  Jan 21, 2025
• Medium 5.5
  CVE-2025-21497

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 5.5
  CVE-2025-21555

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 5.5
  CVE-2025-21559

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 5.4
  CVE-2025-21540

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21490

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21491

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21492

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21499

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21503

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21504

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21505

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21523

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21525

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21529

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21531

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21534

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Performance Schema). Supported versions t…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21536

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.9
  CVE-2025-21543

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are a…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.4
  CVE-2025-21493

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.4
  CVE-2025-21495

  Vulnerability in the MySQL Enterprise Firewall product of Oracle MySQL (component: Firewall). Supported versions that a…

  Oracle MySQL Enterprise Firewall
  Jan 21, 2025
• Medium 4.4
  CVE-2025-21519

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.3
  CVE-2025-21567

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Medium 4.1
  CVE-2025-21494

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Low 3.8
  CVE-2025-21546

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 21, 2025
• Low 3.4
  CVE-2024-11053

  netrc and redirect credential leak

  When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that …

  curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi
  Dec 11, 2024
• Low 1.8
  CVE-2025-21520

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are aff…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jan 21, 2025

Revision history

1. 2026-04-06 #25

   Neue Updates von Red Hat, Rocky Enterprise Software Foundation und Oracle Linux aufgenommen

2. 2026-01-11 #24

   Neue Updates von Oracle Linux aufgenommen

3. 2026-01-08 #23

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

4. 2026-01-07 #22

   Neue Updates von Red Hat aufgenommen

5. 2026-01-06 #21

   Neue Updates von Oracle Linux und Red Hat aufgenommen

6. 2025-12-01 #20

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

7. 2025-11-06 #19

   Neue Updates von Oracle Linux aufgenommen

8. 2025-11-05 #18

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

9. 2025-11-04 #17

   Neue Updates von Red Hat aufgenommen

10. 2025-11-03 #16

    Neue Updates von Red Hat aufgenommen

11. 2025-06-10 #15

    Neue Updates von NetApp aufgenommen

12. 2025-05-29 #14

    Neue Updates von SUSE aufgenommen

13. 2025-03-31 #13

    Neue Updates von Ubuntu aufgenommen

14. 2025-03-26 #12

    Neue Updates von Ubuntu aufgenommen

15. 2025-03-16 #11

    Neue Updates von Red Hat aufgenommen

16. 2025-03-02 #10

    Neue Updates von Debian aufgenommen

17. 2025-02-26 #9

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

18. 2025-02-24 #8

    Neue Updates von Red Hat aufgenommen

19. 2025-02-23 #7

    Neue Updates von Oracle Linux und Red Hat aufgenommen

20. 2025-02-18 #6

    Neue Updates von Red Hat aufgenommen

21. 2025-02-12 #5

    Neue Updates aufgenommen

22. 2025-02-04 #4

    Neue Updates aufgenommen

23. 2025-01-30 #3

    Neue Updates von Ubuntu aufgenommen

24. 2025-01-26 #2

    Neue Updates von NetApp aufgenommen

25. 2025-01-21 #1

    Initiale Fassung

References

• Oracle Critical Patch Update Advisory - January 2025 - Appendix Oracle MySQL vom 2025-01-21
  https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL
• NetApp Security Advisory NTAP-20250124-0011 vom 2025-01-24
  https://security.netapp.com/advisory/ntap-20250124-0011/
• Ubuntu Security Notice USN-7245-1 vom 2025-01-30
  https://ubuntu.com/security/notices/USN-7245-1
• MariaDB 10.11.11 Release Notes vom 2025-02-05
  https://mariadb.com/kb/en/mdb-101111-rn/
• MariaDB 10.5.28 Release Notes vom 2025-02-05
  https://mariadb.com/kb/en/mdb-10-5-28-rn/
• MariaDB 10.6.21 Release Notes vom 2025-02-05
  https://mariadb.com/kb/en/mdb-10621-rn/
• MariaDB 11.7.2 Release Notes vom 2025-02-13
  https://mariadb.com/kb/en/mariadb-11-7-2-release-notes/
• Red Hat Security Advisory RHSA-2025:1671 vom 2025-02-19
  https://access.redhat.com/errata/RHSA-2025:1671
• Red Hat Security Advisory RHSA-2025:1673 vom 2025-02-19
  https://access.redhat.com/errata/RHSA-2025:1673
• Oracle Linux Security Advisory ELSA-2025-1673 vom 2025-02-21
  https://linux.oracle.com/errata/ELSA-2025-1673.html
• Oracle Linux Security Advisory ELSA-2025-1671 vom 2025-02-21
  https://linux.oracle.com/errata/ELSA-2025-1671.html
• Red Hat Security Advisory RHSA-2025:1755 vom 2025-02-24
  https://access.redhat.com/errata/RHSA-2025:1755
• Red Hat Security Advisory RHSA-2025:1756 vom 2025-02-24
  https://access.redhat.com/errata/RHSA-2025:1756
• Red Hat Security Advisory RHSA-2025:1757 vom 2025-02-24
  https://access.redhat.com/errata/RHSA-2025:1757
• Red Hat Security Advisory RHSA-2025:1766 vom 2025-02-24
  https://access.redhat.com/errata/RHSA-2025:1766
• Red Hat Security Advisory RHSA-2025:1767 vom 2025-02-24
  https://access.redhat.com/errata/RHSA-2025:1767
• Rocky Linux Security Advisory RLSA-2025:1673 vom 2025-02-26
  https://errata.build.resf.org/RLSA-2025:1673
• Debian Security Advisory DLA-4074 vom 2025-03-01
  https://lists.debian.org/debian-lts-announce/2025/03/msg00000.html
• Red Hat Security Advisory RHSA-2025:2882 vom 2025-03-17
  https://access.redhat.com/errata/RHSA-2025:2882
• Red Hat Security Advisory RHSA-2025:2883 vom 2025-03-17
  https://access.redhat.com/errata/RHSA-2025:2883
• Ubuntu Security Notice USN-7376-1 vom 2025-03-27
  https://ubuntu.com/security/notices/USN-7376-1
• Ubuntu Security Notice USN-7376-2 vom 2025-03-31
  https://ubuntu.com/security/notices/USN-7376-2
• SUSE Security Update SUSE-SU-2025:01716-1 vom 2025-05-28
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZD7OICEDCJBRPYYAQ46SMEOBTYRJAAWL/
• NetApp Security Advisory NTAP-20250131-0004 vom 2025-06-11
  https://security.netapp.com/advisory/NTAP-20250131-0004
• NetApp Security Advisory NTAP-20250124-0013 vom 2025-06-11
  https://security.netapp.com/advisory/NTAP-20250124-0013
• NetApp Security Advisory NTAP-20250124-0010 vom 2025-06-11
  https://security.netapp.com/advisory/NTAP-20250124-0010
• Red Hat Security Advisory RHSA-2025:19584 vom 2025-11-04
  https://access.redhat.com/errata/RHSA-2025:19584
• Red Hat Security Advisory RHSA-2025:19572 vom 2025-11-04
  https://access.redhat.com/errata/RHSA-2025:19572
• Rocky Linux Security Advisory RLSA-2025:19584 vom 2025-11-06
  https://errata.build.resf.org/RLSA-2025:19584
• Oracle Linux Security Advisory ELSA-2025-19584 vom 2025-11-06
  https://linux.oracle.com/errata/ELSA-2025-19584.html
• Oracle Linux Security Advisory ELSA-2025-19572 vom 2025-11-07
  https://linux.oracle.com/errata/ELSA-2025-19572.html
• Rocky Linux Security Advisory RLSA-2025:19572 vom 2025-12-02
  https://errata.build.resf.org/RLSA-2025:19572
• Oracle Linux Security Advisory ELSA-2026-0136 vom 2026-01-07
  https://linux.oracle.com/errata/ELSA-2026-0136.html
• Red Hat Security Advisory RHSA-2026:0136 vom 2026-01-06
  https://access.redhat.com/errata/RHSA-2026:0136
• Red Hat Security Advisory RHSA-2026:0247 vom 2026-01-07
  https://access.redhat.com/errata/RHSA-2026:0247
• Rocky Linux Security Advisory RLSA-2026:0247 vom 2026-01-09
  https://errata.build.resf.org/RLSA-2026:0247
• Rocky Linux Security Advisory RLSA-2026:0136 vom 2026-01-09
  https://errata.build.resf.org/RLSA-2026:0136
• Oracle Linux Security Advisory ELSA-2026-0247 vom 2026-01-10
  https://linux.oracle.com/errata/ELSA-2026-0247.html
• Red Hat Security Advisory RHSA-2026:6435 vom 2026-04-02
  https://access.redhat.com/errata/RHSA-2026:6435
• Rocky Linux Security Advisory RLSA-2026:6435 vom 2026-04-02
  https://errata.build.resf.org/RLSA-2026:6435
• Oracle Linux Security Advisory ELSA-2026-6435 vom 2026-04-03
  https://linux.oracle.com/errata/ELSA-2026-6435.html