Oracle MySQL: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 34

• Critical 9.1
  CVE-2024-40896

  In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for extern…

  libxml2 libxml2 libxml2 openjdk-7-jre Azure Linux Wolfi
  Dec 23, 2024
• High 8.7
  CVE-2024-7254

  Stack overflow in Protocol Buffers Java Lite

  Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsPar…

  Google google-protobuf [JRuby Gem] protobuf-kotlin protobuf-java Debian Ubuntu Wolfi Maven RubyGems
  Sep 19, 2024
• High 7.5
  CVE-2025-30706

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are aff…

  Oracle MySQL Connectors mysql-connector-java Ubuntu
  Apr 15, 2025
• Medium 6.5
  CVE-2025-21574 Public exploit

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 6.5
  CVE-2025-21575

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 6.5
  CVE-2025-21577

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 6.5
  CVE-2025-30682

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 6.5
  CVE-2025-30687

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 6.5
  CVE-2025-30688

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 5.5
  CVE-2025-30693

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Azure Linux
  Apr 15, 2025
• Medium 5.5
  CVE-2025-30695

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 5.3
  CVE-2025-30722

  Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a…

  Oracle MySQL Cluster MySQL Client percona-server-5.6 Debian Ubuntu
  Apr 15, 2025
• Medium 4.9
  CVE-2025-21579

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are aff…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-21580

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-21581

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-21583

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 15, 2025
• Medium 4.9
  CVE-2025-21584

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-21585

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-21588

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 15, 2025
• Medium 4.9
  CVE-2025-30683

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-30684

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-30685

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-30689

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-30696

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-30699

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-30705

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.9
  CVE-2025-30710

  Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDBCluster Plugin). Supported versions …

  Oracle MySQL Cluster
  Apr 15, 2025
• Medium 4.9
  CVE-2025-30715

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.8
  CVE-2025-30714

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that ar…

  Oracle MySQL Connectors mysql-connector-python Ubuntu
  Apr 15, 2025
• Medium 4.6
  CVE-2024-13176 Public exploit

  Timing side-channel in ECDSA signature computation

  Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacke…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 20, 2025
• Medium 4.4
  CVE-2025-30704

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Medium 4.0
  CVE-2025-30721

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Low 2.7
  CVE-2025-30681

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu Azure Linux
  Apr 15, 2025
• Low 2.7
  CVE-2025-30703

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Apr 15, 2025

Revision history

1. 2026-11-08 #29

   Neue Updates von Red Hat aufgenommen

2. 2026-04-06 #28

   Neue Updates von Rocky Enterprise Software Foundation, Red Hat und Oracle Linux aufgenommen

3. 2026-01-11 #27

   Neue Updates von Oracle Linux aufgenommen

4. 2026-01-08 #26

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

5. 2026-01-07 #25

   Neue Updates von Red Hat aufgenommen

6. 2026-01-06 #24

   Neue Updates von Red Hat und Oracle Linux aufgenommen

7. 2025-12-21 #23

   Neue Updates von SUSE aufgenommen

8. 2025-12-10 #22

   Neue Updates von SUSE aufgenommen

9. 2025-12-01 #21

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

10. 2025-11-26 #20

    Neue Updates von openSUSE aufgenommen

11. 2025-11-06 #19

    Neue Updates von Oracle Linux aufgenommen

12. 2025-11-05 #18

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

13. 2025-11-04 #17

    Neue Updates von Red Hat aufgenommen

14. 2025-11-03 #16

    Neue Updates von Red Hat aufgenommen

15. 2025-10-14 #15

    Neue Updates aufgenommen

16. 2025-10-09 #14

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

17. 2025-09-29 #13

    Neue Updates von Oracle Linux aufgenommen

18. 2025-09-28 #12

    Neue Updates von Red Hat aufgenommen

19. 2025-09-23 #11

    Neue Updates von Oracle Linux aufgenommen

20. 2025-09-17 #10

    Neue Updates von Red Hat aufgenommen

21. 2025-09-16 #9

    Neue Updates von Red Hat aufgenommen

22. 2025-09-14 #8

    Neue Updates von Oracle Linux aufgenommen

23. 2025-09-11 #7

    Neue Updates von NetApp und Red Hat aufgenommen

24. 2025-06-04 #6

    Neue Updates von Debian aufgenommen

25. 2025-06-02 #5

    Neue Updates von Ubuntu aufgenommen

References

• Oracle Critical Patch Update Advisory - April 2025 - Appendix Oracle MySQL vom 2025-04-15
  https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL
• Ubuntu Security Notice USN-7479-1 vom 2025-05-05
  https://ubuntu.com/security/notices/USN-7479-1
• Ubuntu Security Notice USN-7519-1 vom 2025-05-20
  https://ubuntu.com/security/notices/USN-7519-1
• IBM Security Bulletin 7235067 vom 2025-05-29
  https://www.ibm.com/support/pages/node/7235067
• Ubuntu Security Notice USN-7548-1 vom 2025-06-03
  https://ubuntu.com/security/notices/USN-7548-1
• Debian Security Advisory DLA-4208 vom 2025-06-04
  https://lists.debian.org/debian-lts-announce/2025/06/msg00005.html
• NetApp Security Advisory NTAP-20250418-0005 vom 2025-09-11
  https://security.netapp.com/advisory/NTAP-20250418-0005
• Red Hat Security Advisory RHSA-2025:15699 vom 2025-09-11
  https://access.redhat.com/errata/RHSA-2025:15699
• NetApp Security Advisory NTAP-20250502-0006 vom 2025-09-11
  https://security.netapp.com/advisory/NTAP-20250502-0006
• Oracle Linux Security Advisory ELSA-2025-15699 vom 2025-09-13
  http://linux.oracle.com/errata/ELSA-2025-15699.html
• Red Hat Security Advisory RHSA-2025:16046 vom 2025-09-17
  https://access.redhat.com/errata/RHSA-2025:16046
• Red Hat Security Advisory RHSA-2025:16086 vom 2025-09-17
  https://access.redhat.com/errata/RHSA-2025:16086
• Oracle Linux Security Advisory ELSA-2025-16086 vom 2025-09-23
  https://linux.oracle.com/errata/ELSA-2025-16086.html
• Red Hat Security Advisory RHSA-2025:16861 vom 2025-09-29
  https://access.redhat.com/errata/RHSA-2025:16861
• Oracle Linux Security Advisory ELSA-2025-16861 vom 2025-09-30
  https://linux.oracle.com/errata/ELSA-2025-16861.html
• Rocky Linux Security Advisory RLSA-2025:16086 vom 2025-10-10
  https://errata.build.resf.org/RLSA-2025:16086
• MariaDB Security Vulnerabilities
  https://mariadb.com/kb/en/library/security/
• Red Hat Security Advisory RHSA-2025:19584 vom 2025-11-04
  https://access.redhat.com/errata/RHSA-2025:19584
• Red Hat Security Advisory RHSA-2025:19572 vom 2025-11-04
  https://access.redhat.com/errata/RHSA-2025:19572
• Rocky Linux Security Advisory RLSA-2025:19584 vom 2025-11-06
  https://errata.build.resf.org/RLSA-2025:19584
• Oracle Linux Security Advisory ELSA-2025-19584 vom 2025-11-06
  https://linux.oracle.com/errata/ELSA-2025-19584.html
• Oracle Linux Security Advisory ELSA-2025-19572 vom 2025-11-07
  https://linux.oracle.com/errata/ELSA-2025-19572.html
• openSUSE Security Update OPENSUSE-SU-2025-20089-1 vom 2025-11-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZNDZF2UHXA5B6TTZU5K75XUACC2LJDI6/
• Rocky Linux Security Advisory RLSA-2025:16046 vom 2025-12-02
  https://errata.build.resf.org/RLSA-2025:16046
• Rocky Linux Security Advisory RLSA-2025:19572 vom 2025-12-02
  https://errata.build.resf.org/RLSA-2025:19572
• Rocky Linux Security Advisory RLSA-2025:16861 vom 2025-12-02
  https://errata.build.resf.org/RLSA-2025:16861
• SUSE Security Update SUSE-SU-2025:21144-1 vom 2025-12-10
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023513.html
• SUSE Security Update SUSE-SU-2025:4491-1 vom 2025-12-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6TT63QK3N3UDJEHX5ZIMCKLUCW6ITQX2/
• Red Hat Security Advisory RHSA-2026:0136 vom 2026-01-06
  https://access.redhat.com/errata/RHSA-2026:0136
• Oracle Linux Security Advisory ELSA-2026-0136 vom 2026-01-07
  https://linux.oracle.com/errata/ELSA-2026-0136.html
• Red Hat Security Advisory RHSA-2026:0247 vom 2026-01-07
  https://access.redhat.com/errata/RHSA-2026:0247
• Rocky Linux Security Advisory RLSA-2026:0136 vom 2026-01-09
  https://errata.build.resf.org/RLSA-2026:0136
• Rocky Linux Security Advisory RLSA-2026:0247 vom 2026-01-09
  https://errata.build.resf.org/RLSA-2026:0247
• Oracle Linux Security Advisory ELSA-2026-0247 vom 2026-01-10
  https://linux.oracle.com/errata/ELSA-2026-0247.html
• Rocky Linux Security Advisory RLSA-2026:6435 vom 2026-04-02
  https://errata.build.resf.org/RLSA-2026:6435
• Red Hat Security Advisory RHSA-2026:6435 vom 2026-04-02
  https://access.redhat.com/errata/RHSA-2026:6435
• Oracle Linux Security Advisory ELSA-2026-6435 vom 2026-04-03
  https://linux.oracle.com/errata/ELSA-2026-6435.html
• Red Hat Security Advisory RHSA-2026:96037 vom 2026-11-07
  https://access.redhat.com/errata/RHSA-2026:96037
• Red Hat Security Advisory RHSA-2026:96038 vom 2026-11-07
  https://access.redhat.com/errata/RHSA-2026:96038