Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:15699

Опубликовано: 03 окт. 2025
Источник: rocky
Оценка: Moderate

Описание

Moderate: mysql-selinux and mysql8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.

Security Fix(es):

  • openssl: Timing side-channel in ECDSA signature computation (CVE-2024-13176)

  • mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688)

  • mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699)

  • mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682)

  • mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683)

  • mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715)

  • mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585)

  • mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21588)

  • mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687)

  • mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580)

  • mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30696)

  • mysql: PS unspecified vulnerability (CPU Apr 2025) (CVE-2025-30705)

  • mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21575)

  • mysql: Options unspecified vulnerability (CPU Apr 2025) (CVE-2025-21579)

  • mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30685)

  • mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30704)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21581)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30689)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30695)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30703)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

  • mysql: DDL unspecified vulnerability (CPU Apr 2025) (CVE-2025-21584)

  • mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30684)

  • curl: libcurl: WebSocket endless loop (CVE-2025-5399)

  • mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50092)

  • mysql: mysqldump unspecified vulnerability (CPU Jul 2025) (CVE-2025-50081)

  • mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50079)

  • mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50077)

  • mysql: DML unspecified vulnerability (CPU Jul 2025) (CVE-2025-50078)

  • mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50091)

  • mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50101)

  • mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50093)

  • mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50099)

  • mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50085)

  • mysql: Components Services unspecified vulnerability (CPU Jul 2025) (CVE-2025-50086)

  • mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50082)

  • mysql: Encryption unspecified vulnerability (CPU Jul 2025) (CVE-2025-50097)

  • mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50104)

  • mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50087)

  • mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) (CVE-2025-50080)

  • mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50088)

  • mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50083)

  • mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50084)

  • mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) (CVE-2025-50100)

  • mysql: DDL unspecified vulnerability (CPU Jul 2025) (CVE-2025-50094)

  • mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50098)

  • mysql: InnoDB unspecified vulnerability (CPU Jul 2025) (CVE-2025-50096)

  • mysql: Optimizer unspecified vulnerability (CPU Jul 2025) (CVE-2025-50102)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
mysql8.4x86_642.el10_0mysql8.4-8.4.6-2.el10_0.x86_64.rpm
mysql8.4-commonnoarch2.el10_0mysql8.4-common-8.4.6-2.el10_0.noarch.rpm
mysql8.4-errmsgnoarch2.el10_0mysql8.4-errmsg-8.4.6-2.el10_0.noarch.rpm
mysql8.4-libsx86_642.el10_0mysql8.4-libs-8.4.6-2.el10_0.x86_64.rpm
mysql8.4-serverx86_642.el10_0mysql8.4-server-8.4.6-2.el10_0.x86_64.rpm
mysql-selinuxnoarch1.el10_0mysql-selinux-1.0.14-1.el10_0.noarch.rpm

Показывать по

Связанные CVE

CVE-2024-13176
CVE-2025-21574
CVE-2025-21575
CVE-2025-21577
CVE-2025-21579
CVE-2025-21580
CVE-2025-21581
CVE-2025-21584
CVE-2025-21585
CVE-2025-21588
CVE-2025-30681
CVE-2025-30682
CVE-2025-30683
CVE-2025-30684
CVE-2025-30685
CVE-2025-30687
CVE-2025-30688
CVE-2025-30689
CVE-2025-30693
CVE-2025-30695
CVE-2025-30696
CVE-2025-30699
CVE-2025-30703
CVE-2025-30704
CVE-2025-30705
CVE-2025-30715
CVE-2025-30721
CVE-2025-30722
CVE-2025-50077
CVE-2025-50078
CVE-2025-50079
CVE-2025-50080
CVE-2025-50081
CVE-2025-50082
CVE-2025-50083
CVE-2025-50084
CVE-2025-50085
CVE-2025-50086
CVE-2025-50087
CVE-2025-50088
CVE-2025-50091
CVE-2025-50092
CVE-2025-50093
CVE-2025-50094
CVE-2025-50096
CVE-2025-50097
CVE-2025-50098
CVE-2025-50099
CVE-2025-50100
CVE-2025-50101
CVE-2025-50102
CVE-2025-50104
CVE-2025-5399

Ссылки на источники

Исправления

Связанные уязвимости

oracle-oval логотип

ELSA-2025-16046

oracle-oval
около 2 месяцев назад

ELSA-2025-16046: mysql:8.4 security update (MODERATE)

oracle-oval логотип

ELSA-2025-15699

oracle-oval
около 2 месяцев назад

ELSA-2025-15699: mysql-selinux and mysql8.4 security update (MODERATE)

oracle-oval логотип

ELSA-2025-16861

oracle-oval
около 1 месяца назад

ELSA-2025-16861: mysql:8.0 security update (MODERATE)

oracle-oval логотип

ELSA-2025-16086

oracle-oval
около 1 месяца назад

ELSA-2025-16086: mysql security update (MODERATE)

ubuntu логотип

CVE-2024-13176

CVSS3: 4.1
ubuntu
10 месяцев назад

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low. The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.