RHSA-2025:16046MediumCVSS 6.5

Red Hat Security Advisory: mysql:8.4 security update

Published
September 17, 2025
Last Modified
November 9, 2026

🔗 CVE IDs covered (51)

CVE-2025-21577 →CVE-2025-21581 →CVE-2025-21585 →CVE-2025-30681 →CVE-2025-30703 →CVE-2025-30721 →CVE-2025-50082 →CVE-2025-21584 →CVE-2025-30682 →CVE-2025-30687 →CVE-2025-30693 →CVE-2025-30715 →CVE-2025-50083 →CVE-2025-50084 →CVE-2025-50085 →CVE-2025-21580 →CVE-2025-30722 →CVE-2025-50094 →CVE-2025-50096 →CVE-2025-50099 →CVE-2025-50100 →CVE-2025-21574 →CVE-2025-21588 →CVE-2025-30683 →CVE-2025-30689 →CVE-2025-50077 →CVE-2025-50086 →CVE-2025-50087 →CVE-2025-50088 →CVE-2025-30704 →CVE-2025-50079 →CVE-2025-50081 →CVE-2025-50091 →CVE-2025-50092 →CVE-2025-50097 →CVE-2025-50101 →CVE-2025-50104 →CVE-2025-30685 →CVE-2025-30705 →CVE-2025-50080 →CVE-2025-21579 →CVE-2025-30684 →CVE-2025-30695 →CVE-2025-30696 →CVE-2025-30699 →CVE-2025-50098 →CVE-2025-50102 →CVE-2025-30688 →CVE-2025-50078 →CVE-2025-50093 →CVE-2025-21575 →

📋 Description

CVE-2025-21574 — mysql: Parser unspecified vulnerability (CPU Apr 2025) CVE-2025-21575 — mysql: Parser unspecified vulnerability (CPU Apr 2025) CVE-2025-21577 — mysql: InnoDB unspecified vulnerability (CPU Apr 2025) CVE-2025-21579 — mysql: Options unspecified vulnerability (CPU Apr 2025) CVE-2025-21580 — mysql: DML unspecified vulnerability (CPU Apr 2025) CVE-2025-21581 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-21584 — mysql: DDL unspecified vulnerability (CPU Apr 2025) CVE-2025-21585 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-21588 — mysql: DML unspecified vulnerability (CPU Apr 2025) CVE-2025-30681 — mysql: Replication unspecified vulnerability (CPU Apr 2025) CVE-2025-30682 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-30683 — mysql: Replication unspecified vulnerability (CPU Apr 2025) CVE-2025-30684 — mysql: Replication unspecified vulnerability (CPU Apr 2025) CVE-2025-30685 — mysql: Replication unspecified vulnerability (CPU Apr 2025) CVE-2025-30687 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-30688 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-30689 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-30693 — mysql: mariadb: InnoDB unspecified vulnerability (CPU Apr 2025) CVE-2025-30695 — mysql: InnoDB unspecified vulnerability (CPU Apr 2025) CVE-2025-30696 — mysql: PS unspecified vulnerability (CPU Apr 2025) CVE-2025-30699 — mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) CVE-2025-30703 — mysql: InnoDB unspecified vulnerability (CPU Apr 2025) CVE-2025-30704 — mysql: Components Services unspecified vulnerability (CPU Apr 2025) CVE-2025-30705 — mysql: PS unspecified vulnerability (CPU Apr 2025) CVE-2025-30715 — mysql: Components Services unspecified vulnerability (CPU Apr 2025) CVE-2025-30721 — mysql: UDF unspecified vulnerability (CPU Apr 2025) CVE-2025-30722 — mysql: mariadb: mysqldump unspecified vulnerability (CPU Apr 2025) CVE-2025-50077 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50078 — mysql: DML unspecified vulnerability (CPU Jul 2025) CVE-2025-50079 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50080 — mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) CVE-2025-50081 — mysql: mysqldump unspecified vulnerability (CPU Jul 2025) CVE-2025-50082 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50083 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50084 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50085 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50086 — mysql: Components Services unspecified vulnerability (CPU Jul 2025) CVE-2025-50087 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50088 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50091 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50092 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50093 — mysql: DDL unspecified vulnerability (CPU Jul 2025) CVE-2025-50094 — mysql: DDL unspecified vulnerability (CPU Jul 2025) CVE-2025-50096 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50097 — mysql: Encryption unspecified vulnerability (CPU Jul 2025) CVE-2025-50098 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50099 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50100 — mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) CVE-2025-50101 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50102 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50104 — mysql: DDL unspecified vulnerability (CPU Jul 2025)

🎯 Affected products81

  • Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.src (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debuginfo-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debuginfo-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debuginfo-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debuginfo-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debugsource-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debugsource-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debugsource-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debugsource-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-devel-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-devel-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-devel-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-devel-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.src (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-EUCJP-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-EUCJP-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-EUCJP-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-EUCJP-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mysql-0:8.4.6-1.module+el9.6.0+23497+d0c5dcca.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mysql-0:8.4.6-1.module+el9.6.0+23497+d0c5dcca.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mysql-0:8.4.6-1.module+el9.6.0+23497+d0c5dcca.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • +51 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Restrict network access to the MySQL Server to trusted clients only. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Users of affected products should install the updated mysql packages as they become available through their respective update channels. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. As a general precaution, since exploitation requires a highly privileged database account with network access, restricting network exposure of the MySQL server and limiting privileged accounts can reduce risk. Apply the updated mysql packages delivered through Red Hat errata for the affected Red Hat Enterprise Linux streams, or Oracle's July 2025 Critical Patch Update for Oracle MySQL. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Users of affected Red Hat Enterprise Linux releases should install the updated mysql packages provided through the Red Hat repositories. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Fixes for the affected Red Hat Enterprise Linux mysql packages are delivered through the standard Red Hat update process, and users should apply the available updates. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Users should apply the updated mysql packages through their respective Red Hat or Fedora update channels when they become available for their release. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. For Red Hat Enterprise Linux, updated mysql packages that address this flaw have been delivered through the standard update channels of the affected releases, and users are advised to apply them. For Fedora, the package update is deferred; users should apply future mysql package updates when they become available. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Users of affected Red Hat Enterprise Linux releases should apply the mysql package updates available for their release, which contain the fix for this issue. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Updated mysql packages that address this flaw have been released for the affected Red Hat Enterprise Linux releases through their respective update streams, and users are advised to update to the latest available packages. For Fedora, the fix is currently available only in Rawhide. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Applying updated mysql packages for affected Red Hat Enterprise Linux streams, delivered through the respective Red Hat update channels, addresses this issue. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Oracle addressed this issue in the July 2025 Critical Patch Update for MySQL Server, and fixes for affected Red Hat products are delivered through their respective update processes.

🔗 References (54)