mysql: Fix of 49 CVEs
- Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559 - Rebase mysql-mtr.patch - Remove mysql-fix-includes-robin-hood.patch - Rebase mysql-increase-wait-until-connect-timeout.patch
- Products
- mysql, mysql-common, mysql-devel, mysql-errmsg, mysql-libs, mysql-server, mysql-test
- Affected versions
- Not specified
- Fixed versions
- 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
- CVEs
- CVE-2024-11053, CVE-2024-21193, CVE-2024-21194, CVE-2024-21196, CVE-2024-21197, CVE-2024-21198, CVE-2024-21199, CVE-2024-21201, CVE-2024-21203, CVE-2024-21212, CVE-2024-21213, CVE-2024-21218, CVE-2024-21219, CVE-2024-21230, CVE-2024-21231, CVE-2024-21236, CVE-2024-21237, CVE-2024-21238, CVE-2024-21239, CVE-2024-21241, CVE-2024-21247, CVE-2024-37371, CVE-2024-5535, CVE-2024-7264, CVE-2025-21490, CVE-2025-21491, CVE-2025-21494, CVE-2025-21497, CVE-2025-21500, CVE-2025-21501, CVE-2025-21503, CVE-2025-21504, CVE-2025-21505, CVE-2025-21518, CVE-2025-21519, CVE-2025-21520, CVE-2025-21521, CVE-2025-21522, CVE-2025-21523, CVE-2025-21525, CVE-2025-21529, CVE-2025-21531, CVE-2025-21534, CVE-2025-21536, CVE-2025-21540, CVE-2025-21543, CVE-2025-21546, CVE-2025-21555, CVE-2025-21559
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 14:06 UTC · Revision 1
Source evidence
- Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559 - Rebase mysql-mtr.patch - Remove mysql-fix-includes-robin-hood.patch - Rebase mysql-increase-wait-until-connect-timeout.patch
osv:CLSA-2025-1740824456
mysql
Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-common
Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-devel
Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-errmsg
Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-libs
Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-server
Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-test
Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
Complete source record
{
"id": "fe8595384ecce75dbf8db13aae4a4df61c48196a7570bd798078b814e91953d9",
"url": "https://osv.dev/vulnerability/CLSA-2025-1740824456",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "mysql: Fix of 49 CVEs",
"summary": "- Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559 - Rebase mysql-mtr.patch - Remove mysql-fix-includes-robin-hood.patch - Rebase mysql-increase-wait-until-connect-timeout.patch",
"evidence": "osv:CLSA-2025-1740824456",
"products": [
{
"name": {
"value": "mysql",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mysql-common",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mysql-devel",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mysql-errmsg",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mysql-libs",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mysql-server",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mysql-test",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2025-1740824456",
"aliases": [
"CLSA-2025-1740824456"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
}
]
}
],
"package": {
"name": "mysql",
"purl": "pkg:rpm/tuxcare/mysql?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
}
]
}
],
"package": {
"name": "mysql-common",
"purl": "pkg:rpm/tuxcare/mysql-common?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
}
]
}
],
"package": {
"name": "mysql-devel",
"purl": "pkg:rpm/tuxcare/mysql-devel?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
}
]
}
],
"package": {
"name": "mysql-errmsg",
"purl": "pkg:rpm/tuxcare/mysql-errmsg?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
}
]
}
],
"package": {
"name": "mysql-libs",
"purl": "pkg:rpm/tuxcare/mysql-libs?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
}
]
}
],
"package": {
"name": "mysql-server",
"purl": "pkg:rpm/tuxcare/mysql-server?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
}
]
}
],
"package": {
"name": "mysql-test",
"purl": "pkg:rpm/tuxcare/mysql-test?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
}
}
],
"modified": "2026-10-21T10:48:07.933249858Z",
"provider": "osv",
"upstream": [
"CVE-2024-11053",
"CVE-2024-21193",
"CVE-2024-21194",
"CVE-2024-21196",
"CVE-2024-21197",
"CVE-2024-21198",
"CVE-2024-21199",
"CVE-2024-21201",
"CVE-2024-21203",
"CVE-2024-21212",
"CVE-2024-21213",
"CVE-2024-21218",
"CVE-2024-21219",
"CVE-2024-21230",
"CVE-2024-21231",
"CVE-2024-21236",
"CVE-2024-21237",
"CVE-2024-21238",
"CVE-2024-21239",
"CVE-2024-21241",
"CVE-2024-21247",
"CVE-2024-37371",
"CVE-2024-5535",
"CVE-2024-7264",
"CVE-2025-21490",
"CVE-2025-21491",
"CVE-2025-21494",
"CVE-2025-21497",
"CVE-2025-21500",
"CVE-2025-21501",
"CVE-2025-21503",
"CVE-2025-21504",
"CVE-2025-21505",
"CVE-2025-21518",
"CVE-2025-21519",
"CVE-2025-21520",
"CVE-2025-21521",
"CVE-2025-21522",
"CVE-2025-21523",
"CVE-2025-21525",
"CVE-2025-21529",
"CVE-2025-21531",
"CVE-2025-21534",
"CVE-2025-21536",
"CVE-2025-21540",
"CVE-2025-21543",
"CVE-2025-21546",
"CVE-2025-21555",
"CVE-2025-21559"
],
"references": [
"https://errata.cloudlinux.com/centos8.5-els/CLSA-2025-1740824456.html"
]
},
"related_cves": [
{
"value": "CVE-2024-11053",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21193",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21194",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21196",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21197",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21198",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21199",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21201",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21203",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21212",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21213",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21218",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21219",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21230",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21231",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21236",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21237",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21238",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21239",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21241",
"evidence": "/upstream"
},
{
"value": "CVE-2024-21247",
"evidence": "/upstream"
},
{
"value": "CVE-2024-37371",
"evidence": "/upstream"
},
{
"value": "CVE-2024-5535",
"evidence": "/upstream"
},
{
"value": "CVE-2024-7264",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21490",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21491",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21494",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21497",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21500",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21501",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21503",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21504",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21505",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21518",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21519",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21520",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21521",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21522",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21523",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21525",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21529",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21531",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21534",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21536",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21540",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21543",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21546",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21555",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21559",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 392819,
"published_at": "2025-03-01T10:21:01+00:00"
}