RHSA-2025:16046MediumCVSS 6.5

Red Hat Security Advisory: mysql:8.4 security update

Published
September 17, 2025
Last Modified
October 15, 2026

🔗 CVE IDs covered (51)

CVE-2025-21584 →CVE-2025-30683 →CVE-2025-30687 →CVE-2025-50082 →CVE-2025-50083 →CVE-2025-50088 →CVE-2025-21588 →CVE-2025-30715 →CVE-2025-50087 →CVE-2025-50091 →CVE-2025-50099 →CVE-2025-50101 →CVE-2025-50104 →CVE-2025-30699 →CVE-2025-50078 →CVE-2025-50081 →CVE-2025-50093 →CVE-2025-50096 →CVE-2025-21577 →CVE-2025-21579 →CVE-2025-21580 →CVE-2025-30681 →CVE-2025-30688 →CVE-2025-30689 →CVE-2025-50084 →CVE-2025-50085 →CVE-2025-50077 →CVE-2025-21574 →CVE-2025-21581 →CVE-2025-21585 →CVE-2025-50080 →CVE-2025-50086 →CVE-2025-50094 →CVE-2025-50100 →CVE-2025-30696 →CVE-2025-30721 →CVE-2025-50079 →CVE-2025-50097 →CVE-2025-30704 →CVE-2025-50092 →CVE-2025-50098 →CVE-2025-30693 →CVE-2025-30695 →CVE-2025-30703 →CVE-2025-30722 →CVE-2025-30682 →CVE-2025-30684 →CVE-2025-30685 →CVE-2025-50102 →CVE-2025-30705 →CVE-2025-21575 →

📋 Description

CVE-2025-21574 — mysql: Parser unspecified vulnerability (CPU Apr 2025) CVE-2025-21575 — mysql: Parser unspecified vulnerability (CPU Apr 2025) CVE-2025-21577 — mysql: InnoDB unspecified vulnerability (CPU Apr 2025) CVE-2025-21579 — mysql: Options unspecified vulnerability (CPU Apr 2025) CVE-2025-21580 — mysql: DML unspecified vulnerability (CPU Apr 2025) CVE-2025-21581 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-21584 — mysql: DDL unspecified vulnerability (CPU Apr 2025) CVE-2025-21585 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-21588 — mysql: DML unspecified vulnerability (CPU Apr 2025) CVE-2025-30681 — mysql: Replication unspecified vulnerability (CPU Apr 2025) CVE-2025-30682 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-30683 — mysql: Replication unspecified vulnerability (CPU Apr 2025) CVE-2025-30684 — mysql: Replication unspecified vulnerability (CPU Apr 2025) CVE-2025-30685 — mysql: Replication unspecified vulnerability (CPU Apr 2025) CVE-2025-30687 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-30688 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-30689 — mysql: Optimizer unspecified vulnerability (CPU Apr 2025) CVE-2025-30693 — mysql: mariadb: InnoDB unspecified vulnerability (CPU Apr 2025) CVE-2025-30695 — mysql: InnoDB unspecified vulnerability (CPU Apr 2025) CVE-2025-30696 — mysql: PS unspecified vulnerability (CPU Apr 2025) CVE-2025-30699 — mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) CVE-2025-30703 — mysql: InnoDB unspecified vulnerability (CPU Apr 2025) CVE-2025-30704 — mysql: Components Services unspecified vulnerability (CPU Apr 2025) CVE-2025-30705 — mysql: PS unspecified vulnerability (CPU Apr 2025) CVE-2025-30715 — mysql: Components Services unspecified vulnerability (CPU Apr 2025) CVE-2025-30721 — mysql: UDF unspecified vulnerability (CPU Apr 2025) CVE-2025-30722 — mysql: mariadb: mysqldump unspecified vulnerability (CPU Apr 2025) CVE-2025-50077 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50078 — mysql: DML unspecified vulnerability (CPU Jul 2025) CVE-2025-50079 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50080 — mysql: Stored Procedure unspecified vulnerability (CPU Jul 2025) CVE-2025-50081 — mysql: mysqldump unspecified vulnerability (CPU Jul 2025) CVE-2025-50082 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50083 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50084 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50085 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50086 — mysql: Components Services unspecified vulnerability (CPU Jul 2025) CVE-2025-50087 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50088 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50091 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50092 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50093 — mysql: DDL unspecified vulnerability (CPU Jul 2025) CVE-2025-50094 — mysql: DDL unspecified vulnerability (CPU Jul 2025) CVE-2025-50096 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50097 — mysql: Encryption unspecified vulnerability (CPU Jul 2025) CVE-2025-50098 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50099 — mysql: InnoDB unspecified vulnerability (CPU Jul 2025) CVE-2025-50100 — mysql: Thread Pooling unspecified vulnerability (CPU Jul 2025) CVE-2025-50101 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50102 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025) CVE-2025-50104 — mysql: DDL unspecified vulnerability (CPU Jul 2025)

🎯 Affected products81

  • Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.src (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debuginfo-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debuginfo-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debuginfo-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debuginfo-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debugsource-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debugsource-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debugsource-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-debugsource-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-devel-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-devel-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-devel-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-devel-0:0.996-3.module+el9.6.0+22713+cbf15e23.4.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.src (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-EUCJP-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-EUCJP-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-EUCJP-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mecab-ipadic-EUCJP-0:2.7.0.20070801-24.module+el9.6.0+22713+cbf15e23.x86_64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mysql-0:8.4.6-1.module+el9.6.0+23497+d0c5dcca.aarch64 (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mysql-0:8.4.6-1.module+el9.6.0+23497+d0c5dcca.ppc64le (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • mysql-0:8.4.6-1.module+el9.6.0+23497+d0c5dcca.s390x (mysql:8.4) as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • +51 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Restrict network access to the MySQL Server to trusted clients only. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (54)