Oracle MySQL: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 36

• High 7.5
  CVE-2025-5399

  WebSocket endless loop

  Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the threa…

  curl curl curl curl Debian Alpine
  Jun 7, 2025
• High 7.3
  CVE-2025-0725

  gzip integer overflow

  When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

  curl curl mysql curl Debian Azure Linux Alpine Wolfi
  Feb 5, 2025
• Medium 6.7
  CVE-2025-50068

  Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…

  Oracle MySQL Cluster
  Jul 15, 2025
• Medium 6.5
  CVE-2025-50076

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jul 15, 2025
• Medium 6.5
  CVE-2025-50078

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 6.5
  CVE-2025-50082

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 6.5
  CVE-2025-50083

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 5.5
  CVE-2025-50085

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 5.3
  CVE-2024-9287

  Virtual environment (venv) activation scripts don't quote paths

  A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts (ie "source venv/…

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 22, 2024
• Medium 4.9
  CVE-2025-50077

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50079

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50080

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50084

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50086

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50087

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50088

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50089

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50091

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50092

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50093

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50094

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50095

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50097

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50099

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50101

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-50102

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-53023

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.9
  CVE-2025-53032

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jul 15, 2025
• Medium 4.4
  CVE-2024-37891

  Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3

  urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3'…

  urllib3 urllib3 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi PyPI
  Jun 17, 2024
• Medium 4.4
  CVE-2025-50096

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Medium 4.4
  CVE-2025-50103

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jul 15, 2025
• Low 3.1
  CVE-2025-50081

  Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a…

  Oracle MySQL Cluster MySQL Client percona-server-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Low 2.9
  CVE-2025-32415

  In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer u…

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 17, 2025
• Low 2.7
  CVE-2025-50098

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Low 2.7
  CVE-2025-50104

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025
• Low 2.2
  CVE-2025-50100

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux
  Jul 15, 2025

Revision history

1. 2026-01-20 #15

   Neue Updates von IBM aufgenommen

2. 2025-12-01 #14

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

3. 2025-11-17 #13

   Neue Updates von XEROX aufgenommen

4. 2025-10-09 #12

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

5. 2025-10-06 #11

   Neue Updates von Ubuntu aufgenommen

6. 2025-09-29 #10

   Neue Updates von Oracle Linux aufgenommen

7. 2025-09-28 #9

   Neue Updates von Red Hat aufgenommen

8. 2025-09-23 #8

   Neue Updates von Oracle Linux aufgenommen

9. 2025-09-17 #7

   Neue Updates von Red Hat aufgenommen

10. 2025-09-16 #6

    Neue Updates von Red Hat aufgenommen

11. 2025-09-14 #5

    Neue Updates von Oracle Linux aufgenommen

12. 2025-09-11 #4

    Neue Updates von Red Hat aufgenommen

13. 2025-08-13 #3

    Neue Updates von Ubuntu aufgenommen

14. 2025-07-16 #2

    Referenz(en) aufgenommen: EUVD-2025-21495, EUVD-2025-21498, EUVD-2025-21496, EUVD-2025-21494

15. 2025-07-15 #1

    Initiale Fassung

References

• Oracle Critical Patch Update Advisory - July 2025 - Appendix Oracle MySQL vom 2025-07-15
  https://www.oracle.com/security-alerts/cpujul2025.html#AppendixMSQL
• Ubuntu Security Notice USN-7691-1 vom 2025-08-13
  https://ubuntu.com/security/notices/USN-7691-1
• Red Hat Security Advisory RHSA-2025:15699 vom 2025-09-11
  https://access.redhat.com/errata/RHSA-2025:15699
• Oracle Linux Security Advisory ELSA-2025-15699 vom 2025-09-13
  http://linux.oracle.com/errata/ELSA-2025-15699.html
• Red Hat Security Advisory RHSA-2025:16046 vom 2025-09-17
  https://access.redhat.com/errata/RHSA-2025:16046
• Red Hat Security Advisory RHSA-2025:16086 vom 2025-09-17
  https://access.redhat.com/errata/RHSA-2025:16086
• Oracle Linux Security Advisory ELSA-2025-16046 vom 2025-09-18
  https://linux.oracle.com/errata/ELSA-2025-16046.html
• Oracle Linux Security Advisory ELSA-2025-16086 vom 2025-09-23
  https://linux.oracle.com/errata/ELSA-2025-16086.html
• Red Hat Security Advisory RHSA-2025:16861 vom 2025-09-29
  https://access.redhat.com/errata/RHSA-2025:16861
• Oracle Linux Security Advisory ELSA-2025-16861 vom 2025-09-30
  https://linux.oracle.com/errata/ELSA-2025-16861.html
• Ubuntu Security Notice USN-7691-2 vom 2025-10-06
  https://ubuntu.com/security/notices/USN-7691-2
• Rocky Linux Security Advisory RLSA-2025:16086 vom 2025-10-10
  https://errata.build.resf.org/RLSA-2025:16086
• XEROX Security Advisory XRX25-018 vom 2025-11-18
  https://security.business.xerox.com/wp-content/uploads/2025/11/Xerox-Security-Bulletin-XRX25-018-Xerox-FreeFlow-Print-Server-v7.pdf
• Rocky Linux Security Advisory RLSA-2025:16046 vom 2025-12-02
  https://errata.build.resf.org/RLSA-2025:16046
• Rocky Linux Security Advisory RLSA-2025:16861 vom 2025-12-02
  https://errata.build.resf.org/RLSA-2025:16861
• IBM Security Bulletin 7253777 vom 2026-01-21
  https://www.ibm.com/support/pages/node/7253777