Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:1673

Опубликовано: 26 фев. 2025
Источник: rocky
Оценка: Important

Описание

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

  • krb5: GSS message token handling (CVE-2024-37371)

  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

  • curl: curl netrc password leak (CVE-2024-11053)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

  • mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
mecabaarch642.module+el8.10.0+1676+9b4b6e24mecab-0.996-2.module+el8.10.0+1676+9b4b6e24.aarch64.rpm
mecab-develaarch642.module+el8.10.0+1676+9b4b6e24mecab-devel-0.996-2.module+el8.10.0+1676+9b4b6e24.aarch64.rpm
mecab-ipadicaarch6417.module+el8.10.0+1937+28fbbc83mecab-ipadic-2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83.aarch64.rpm
mecab-ipadic-EUCJPaarch6417.module+el8.10.0+1937+28fbbc83mecab-ipadic-EUCJP-2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83.aarch64.rpm
mysqlaarch641.module+el8.10.0+1937+28fbbc83.0.1mysql-8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1.aarch64.rpm
mysql-commonaarch641.module+el8.10.0+1937+28fbbc83.0.1mysql-common-8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1.aarch64.rpm
mysql-develaarch641.module+el8.10.0+1937+28fbbc83.0.1mysql-devel-8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1.aarch64.rpm
mysql-errmsgaarch641.module+el8.10.0+1937+28fbbc83.0.1mysql-errmsg-8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1.aarch64.rpm
mysql-libsaarch641.module+el8.10.0+1937+28fbbc83.0.1mysql-libs-8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1.aarch64.rpm
mysql-serveraarch641.module+el8.10.0+1937+28fbbc83.0.1mysql-server-8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1.aarch64.rpm

Показывать по

Связанные CVE

CVE-2024-11053
CVE-2024-21193
CVE-2024-21194
CVE-2024-21196
CVE-2024-21197
CVE-2024-21198
CVE-2024-21199
CVE-2024-21201
CVE-2024-21203
CVE-2024-21212
CVE-2024-21213
CVE-2024-21218
CVE-2024-21219
CVE-2024-21230
CVE-2024-21231
CVE-2024-21236
CVE-2024-21237
CVE-2024-21238
CVE-2024-21239
CVE-2024-21241
CVE-2024-21247
CVE-2024-37371
CVE-2024-5535
CVE-2024-7264
CVE-2025-21490
CVE-2025-21491
CVE-2025-21494
CVE-2025-21497
CVE-2025-21500
CVE-2025-21501
CVE-2025-21503
CVE-2025-21504
CVE-2025-21505
CVE-2025-21518
CVE-2025-21519
CVE-2025-21520
CVE-2025-21521
CVE-2025-21522
CVE-2025-21523
CVE-2025-21525
CVE-2025-21529
CVE-2025-21531
CVE-2025-21534
CVE-2025-21536
CVE-2025-21540
CVE-2025-21543
CVE-2025-21546
CVE-2025-21555
CVE-2025-21559

Ссылки на источники

Исправления

Связанные уязвимости

rocky логотип

RLSA-2025:1671

rocky
больше 1 года назад

Important: mysql security update

oracle-oval логотип

ELSA-2025-1673

oracle-oval
больше 1 года назад

ELSA-2025-1673: mysql:8.0 security update (IMPORTANT)

oracle-oval логотип

ELSA-2025-1671

oracle-oval
больше 1 года назад

ELSA-2025-1671: mysql security update (IMPORTANT)

altlinux логотип

ALT-PU-2024-14708

CVSS3: 7.5
altlinux
около 2 лет назад

ALT-PU-2024-14708: package `MySQL` update to version 8.0.40-alt1

altlinux логотип

ALT-PU-2024-14481

CVSS3: 7.5
altlinux
около 2 лет назад

ALT-PU-2024-14481: package `MySQL` update to version 8.0.40-alt1