rpm package

almalinux/mysql

pkg:rpm/almalinux/mysql

Vulnerabilities (505)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2025-50100	Low	2.2	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple
CVE-2025-50099	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-50098	Low	2.7	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-50097	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via mult
CVE-2025-50096	Med	4.4	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Serve
CVE-2025-50094	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.42, 8.4.5 and 9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL
CVE-2025-50093	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to
CVE-2025-50092	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-50091	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-50088	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-50087	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-50086	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multi
CVE-2025-50085	Med	5.5	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-50084	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-50083	Med	6.5	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2025-50082	Med	6.5	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2025-50081	Low	3.1	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple prot
CVE-2025-50080	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple
CVE-2025-50079	Med	4.9	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-50078	Med	6.5	< 8.4.6-1.module_el9.6.0+180+a4e757e5	8.4.6-1.module_el9.6.0+180+a4e757e5	Jul 15, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to

CVE-2025-50100LowJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple
CVE-2025-50099MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-50098LowJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-50097MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via mult
CVE-2025-50096MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Serve
CVE-2025-50094MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.42, 8.4.5 and 9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL
CVE-2025-50093MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to
CVE-2025-50092MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-50091MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-50088MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-50087MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-50086MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multi
CVE-2025-50085MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-50084MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-50083MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2025-50082MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2025-50081LowJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple prot
CVE-2025-50080MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple
CVE-2025-50079MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2025-50078MedJul 15, 2025
affected < 8.4.6-1.module_el9.6.0+180+a4e757e5fixed 8.4.6-1.module_el9.6.0+180+a4e757e5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to

Page 3 of 26