Skip to content
Heist/ feed
Back to feed
UnratedFix available

mysql: Fix of 49 CVEs

Type: advisorySources: OSV

- Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559 - Rebase mysql-mtr.patch - Remove mysql-fix-includes-robin-hood.patch - Rebase mysql-increase-wait-until-connect-timeout.patch

Products
mysql, mysql-common, mysql-devel, mysql-errmsg, mysql-libs, mysql-server, mysql-test
Affected versions
Not specified
Fixed versions
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
CVEs
CVE-2024-11053, CVE-2024-21193, CVE-2024-21194, CVE-2024-21196, CVE-2024-21197, CVE-2024-21198, CVE-2024-21199, CVE-2024-21201, CVE-2024-21203, CVE-2024-21212, CVE-2024-21213, CVE-2024-21218, CVE-2024-21219, CVE-2024-21230, CVE-2024-21231, CVE-2024-21236, CVE-2024-21237, CVE-2024-21238, CVE-2024-21239, CVE-2024-21241, CVE-2024-21247, CVE-2024-37371, CVE-2024-5535, CVE-2024-7264, CVE-2025-21490, CVE-2025-21491, CVE-2025-21494, CVE-2025-21497, CVE-2025-21500, CVE-2025-21501, CVE-2025-21503, CVE-2025-21504, CVE-2025-21505, CVE-2025-21518, CVE-2025-21519, CVE-2025-21520, CVE-2025-21521, CVE-2025-21522, CVE-2025-21523, CVE-2025-21525, CVE-2025-21529, CVE-2025-21531, CVE-2025-21534, CVE-2025-21536, CVE-2025-21540, CVE-2025-21543, CVE-2025-21546, CVE-2025-21555, CVE-2025-21559
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 14:06 UTC · Revision 1

Source evidence

mysql: Fix of 49 CVEs

core-osv · Original source

Published 1 Mar 2025, 10:21 UTC

- Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559 - Rebase mysql-mtr.patch - Remove mysql-fix-includes-robin-hood.patch - Rebase mysql-increase-wait-until-connect-timeout.patch

osv:CLSA-2025-1740824456

mysql

Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1

mysql-common

Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1

mysql-devel

Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1

mysql-errmsg

Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1

mysql-libs

Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1

mysql-server

Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1

mysql-test

Fixed versions: 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1

Complete source record
{
  "id": "fe8595384ecce75dbf8db13aae4a4df61c48196a7570bd798078b814e91953d9",
  "url": "https://osv.dev/vulnerability/CLSA-2025-1740824456",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "mysql: Fix of 49 CVEs",
    "summary": "- Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559 - Rebase mysql-mtr.patch - Remove mysql-fix-includes-robin-hood.patch - Rebase mysql-increase-wait-until-connect-timeout.patch",
    "evidence": "osv:CLSA-2025-1740824456",
    "products": [
      {
        "name": {
          "value": "mysql",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "mysql-common",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "mysql-devel",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "mysql-errmsg",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
            "evidence": "/affected/3/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "mysql-libs",
          "evidence": "/affected/4/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
            "evidence": "/affected/4/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "mysql-server",
          "evidence": "/affected/5/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
            "evidence": "/affected/5/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "mysql-test",
          "evidence": "/affected/6/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1",
            "evidence": "/affected/6/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CLSA-2025-1740824456",
      "aliases": [
        "CLSA-2025-1740824456"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "mysql",
            "purl": "pkg:rpm/tuxcare/mysql?distro=centos-8.5",
            "ecosystem": "TuxCare:CentOS:8.5"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "mysql-common",
            "purl": "pkg:rpm/tuxcare/mysql-common?distro=centos-8.5",
            "ecosystem": "TuxCare:CentOS:8.5"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "mysql-devel",
            "purl": "pkg:rpm/tuxcare/mysql-devel?distro=centos-8.5",
            "ecosystem": "TuxCare:CentOS:8.5"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "mysql-errmsg",
            "purl": "pkg:rpm/tuxcare/mysql-errmsg?distro=centos-8.5",
            "ecosystem": "TuxCare:CentOS:8.5"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "mysql-libs",
            "purl": "pkg:rpm/tuxcare/mysql-libs?distro=centos-8.5",
            "ecosystem": "TuxCare:CentOS:8.5"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "mysql-server",
            "purl": "pkg:rpm/tuxcare/mysql-server?distro=centos-8.5",
            "ecosystem": "TuxCare:CentOS:8.5"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "mysql-test",
            "purl": "pkg:rpm/tuxcare/mysql-test?distro=centos-8.5",
            "ecosystem": "TuxCare:CentOS:8.5"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1740824456.json"
          }
        }
      ],
      "modified": "2026-10-21T10:48:07.933249858Z",
      "provider": "osv",
      "upstream": [
        "CVE-2024-11053",
        "CVE-2024-21193",
        "CVE-2024-21194",
        "CVE-2024-21196",
        "CVE-2024-21197",
        "CVE-2024-21198",
        "CVE-2024-21199",
        "CVE-2024-21201",
        "CVE-2024-21203",
        "CVE-2024-21212",
        "CVE-2024-21213",
        "CVE-2024-21218",
        "CVE-2024-21219",
        "CVE-2024-21230",
        "CVE-2024-21231",
        "CVE-2024-21236",
        "CVE-2024-21237",
        "CVE-2024-21238",
        "CVE-2024-21239",
        "CVE-2024-21241",
        "CVE-2024-21247",
        "CVE-2024-37371",
        "CVE-2024-5535",
        "CVE-2024-7264",
        "CVE-2025-21490",
        "CVE-2025-21491",
        "CVE-2025-21494",
        "CVE-2025-21497",
        "CVE-2025-21500",
        "CVE-2025-21501",
        "CVE-2025-21503",
        "CVE-2025-21504",
        "CVE-2025-21505",
        "CVE-2025-21518",
        "CVE-2025-21519",
        "CVE-2025-21520",
        "CVE-2025-21521",
        "CVE-2025-21522",
        "CVE-2025-21523",
        "CVE-2025-21525",
        "CVE-2025-21529",
        "CVE-2025-21531",
        "CVE-2025-21534",
        "CVE-2025-21536",
        "CVE-2025-21540",
        "CVE-2025-21543",
        "CVE-2025-21546",
        "CVE-2025-21555",
        "CVE-2025-21559"
      ],
      "references": [
        "https://errata.cloudlinux.com/centos8.5-els/CLSA-2025-1740824456.html"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2024-11053",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21193",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21194",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21196",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21197",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21198",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21199",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21201",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21203",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21212",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21213",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21218",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21219",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21230",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21231",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21236",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21237",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21238",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21239",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21241",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-21247",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-37371",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-5535",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-7264",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21490",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21491",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21494",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21497",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21500",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21501",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21503",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21504",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21505",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21518",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21519",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21520",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21521",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21522",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21523",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21525",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21529",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21531",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21534",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21536",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21540",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21543",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21546",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21555",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21559",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 392819,
  "published_at": "2025-03-01T10:21:01+00:00"
}