Red Hat Security Advisory: mysql security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535) * krb5: GSS message token handling (CVE-2024-37371) * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264) * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238) * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241) * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231) * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236) * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237) * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203) * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212) * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199) * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193) * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198) * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239) * curl: curl netrc password leak (CVE-2024-11053) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497) * mysql: MySQL Server Options Vulnerability (CVE-2025-21520) * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555) * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491) * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501) * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519) * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559) * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523) * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
This Red Hat security advisory covers a broad set of vulnerabilities affecting MySQL server and related components, including multiple unspecified vulnerabilities reported in the October 2024 and January 2025 CPU cycles. The issues affect various MySQL subsystems such as Thread Pooling, X Plugin, Optimizer, Client programs, Information Schema, InnoDB storage engine, Group Replication, Full Text Search, Health Monitor, DML, DDL, Performance Schema, Privileges, Parser, and Packaging. Additionally, related vulnerabilities in OpenSSL (buffer overread), krb5 (GSS token handling), and curl (ASN.1 date parser overread and netrc password leak) are addressed. The advisory references numerous CVEs but does not provide detailed descriptions or exploitation methods. The update is rated as Important by Red Hat and applies to Red Hat Enterprise Linux 9 and associated CodeReady Linux Builder products. The vendor advisory confirms the availability of updates to remediate these issues.
Potential Impact
The vulnerabilities collectively represent multiple security issues in MySQL and related libraries that could potentially lead to denial of service, unauthorized data modification, privilege misuse, and information disclosure. However, the advisory does not specify exact impact details for each vulnerability. The overall security impact is rated Important by Red Hat Product Security, indicating significant but not critical risk. No known exploits in the wild are reported at this time.
Mitigation Recommendations
Red Hat has released updated packages for MySQL and related components as part of Red Hat Enterprise Linux 9 updates. Users should apply these official updates promptly to remediate the listed vulnerabilities. Detailed instructions for applying the update are available in the Red Hat advisory at https://access.redhat.com/articles/11258. Since this is an official Red Hat security advisory with updated packages, applying the vendor-provided patches is the recommended and effective mitigation. No additional mitigations are specified or required beyond applying the update.
Red Hat Security Advisory: mysql security update
Description
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. Security Fix(es): * openssl: SSL_select_next_proto buffer overread (CVE-2024-5535) * krb5: GSS message token handling (CVE-2024-37371) * curl: libcurl: ASN.1 date parser overread (CVE-2024-7264) * mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238) * mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241) * mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231) * mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236) * mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237) * mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203) * mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212) * mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219) * mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199) * mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193) * mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198) * mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247) * mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239) * curl: curl netrc password leak (CVE-2024-11053) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497) * mysql: MySQL Server Options Vulnerability (CVE-2025-21520) * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555) * mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491) * mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536) * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501) * mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494) * mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519) * mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518) * mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559) * mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546) * mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500) * mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523) * mysql: Components Services unspecified vulnerability (CPU Jan 2025) (CVE-2025-21505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory covers a broad set of vulnerabilities affecting MySQL server and related components, including multiple unspecified vulnerabilities reported in the October 2024 and January 2025 CPU cycles. The issues affect various MySQL subsystems such as Thread Pooling, X Plugin, Optimizer, Client programs, Information Schema, InnoDB storage engine, Group Replication, Full Text Search, Health Monitor, DML, DDL, Performance Schema, Privileges, Parser, and Packaging. Additionally, related vulnerabilities in OpenSSL (buffer overread), krb5 (GSS token handling), and curl (ASN.1 date parser overread and netrc password leak) are addressed. The advisory references numerous CVEs but does not provide detailed descriptions or exploitation methods. The update is rated as Important by Red Hat and applies to Red Hat Enterprise Linux 9 and associated CodeReady Linux Builder products. The vendor advisory confirms the availability of updates to remediate these issues.
Potential Impact
The vulnerabilities collectively represent multiple security issues in MySQL and related libraries that could potentially lead to denial of service, unauthorized data modification, privilege misuse, and information disclosure. However, the advisory does not specify exact impact details for each vulnerability. The overall security impact is rated Important by Red Hat Product Security, indicating significant but not critical risk. No known exploits in the wild are reported at this time.
Mitigation Recommendations
Red Hat has released updated packages for MySQL and related components as part of Red Hat Enterprise Linux 9 updates. Users should apply these official updates promptly to remediate the listed vulnerabilities. Detailed instructions for applying the update are available in the Red Hat advisory at https://access.redhat.com/articles/11258. Since this is an official Red Hat security advisory with updated packages, applying the vendor-provided patches is the recommended and effective mitigation. No additional mitigations are specified or required beyond applying the update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:1671
- Cve Count
- 49
- Additional Cves
- ["CVE-2024-7264","CVE-2024-11053","CVE-2024-21193","CVE-2024-21194","CVE-2024-21196","CVE-2024-21197","CVE-2024-21198","CVE-2024-21199","CVE-2024-21201","CVE-2024-21203","CVE-2024-21212","CVE-2024-21213","CVE-2024-21218","CVE-2024-21219","CVE-2024-21230","CVE-2024-21231","CVE-2024-21236","CVE-2024-21237","CVE-2024-21238","CVE-2024-21239","CVE-2024-21241","CVE-2024-21247","CVE-2024-37371","CVE-2025-21490","CVE-2025-21491","CVE-2025-21494","CVE-2025-21497","CVE-2025-21500","CVE-2025-21501","CVE-2025-21503","CVE-2025-21504","CVE-2025-21505","CVE-2025-21518","CVE-2025-21519","CVE-2025-21520","CVE-2025-21521","CVE-2025-21522","CVE-2025-21523","CVE-2025-21525","CVE-2025-21529","CVE-2025-21531","CVE-2025-21534","CVE-2025-21536","CVE-2025-21540","CVE-2025-21543","CVE-2025-21546","CVE-2025-21555","CVE-2025-21559"]
- Cvss Version
- null
Threat ID: 6a1f4ea0e29bf47b500878a2
Added to database: 06/02/2026, 21:44:00 UTC
Last enriched: 08/04/2026, 16:03:01 UTC
Last updated: 08/22/2026, 22:52:05 UTC
Views: 108
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.