rpm package

almalinux/mysql8.4-test-data

pkg:rpm/almalinux/mysql8.4-test-data

Vulnerabilities (115)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2025-30685	Med	4.9	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple prot
CVE-2025-30684	Med	4.9	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple prot
CVE-2025-30683	Med	4.9	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple prot
CVE-2025-30682	Med	6.5	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2025-30681	Low	2.7	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple prot
CVE-2025-21588	Med	4.9	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise My
CVE-2025-21585	Med	4.9	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-21584	Med	4.9	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to
CVE-2025-21581	Med	4.9	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-21580	Med	4.9	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to
CVE-2025-21579	Med	4.9	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocol
CVE-2025-21577	Med	6.5	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compr
CVE-2025-21575	Med	6.5	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols
CVE-2025-21574	Med	6.5	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Apr 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols
CVE-2024-13176	Med	4.1	< 8.4.6-2.el10_0	8.4.6-2.el10_0	Jan 20, 2025	Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measurin

CVE-2025-30685MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple prot
CVE-2025-30684MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple prot
CVE-2025-30683MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple prot
CVE-2025-30682MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2025-30681LowApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple prot
CVE-2025-21588MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise My
CVE-2025-21585MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-21584MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to
CVE-2025-21581MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-21580MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to
CVE-2025-21579MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocol
CVE-2025-21577MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compr
CVE-2025-21575MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols
CVE-2025-21574MedApr 15, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols
CVE-2024-13176MedJan 20, 2025
affected < 8.4.6-2.el10_0fixed 8.4.6-2.el10_0
Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measurin

Page 6 of 6