Critical Security Update for MySQL and Related Packages: Multiple Vulnerabilities Identified
Summary
ALSA-2025:16086: Moderate: mysql security update. Affects mysql versions < 8.0.43-1.el9_6. Fixed in 8.0.43-1.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MySQL is a widely-used multi-user, multi-threaded SQL database server that includes the MySQL server daemon (mysqld) along with various client programs and libraries. It is known for its reliability, performance, and ease of use, making it a popular choice for web applications and data management. However, recent vulnerabilities have been identified that could potentially compromise the security of MySQL installations, affecting various components such as mysql-server, mysql-common, and mysql-libs.
Vulnerability Detail
The vulnerabilities stem from multiple unspecified issues within MySQL, including problems with mysqldump, the optimizer, stored procedures, user-defined functions (UDF), and replication processes. These vulnerabilities could allow unauthorized access, data corruption, or denial of service. The vulnerabilities are documented under several CVEs, including CVE-2025-30722 and CVE-2025-30688, among others, and are scheduled for disclosure in April and July 2025.
How To Fix
Minimum fixed version
8.0.43-1.el9_6
This is the first release that contains the fix.
sudo dnf update mysqlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the MySQL server by configuring firewall rules to limit connections to trusted IP addresses only. Additionally, disabling certain features that are not in use may help mitigate risks until the update is applied.
Conclusion
In summary, multiple vulnerabilities have been identified in MySQL and its related packages, necessitating immediate attention and updates to ensure the security of your database systems. Users are encouraged to apply the recommended updates and utilize tools like Vulert for ongoing vulnerability monitoring.
See every vulnerability recorded for mysql →
FAQ
The vulnerabilities include issues with mysqldump, the optimizer, stored procedures, and replication processes, which could lead to unauthorized access or data corruption.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
If an immediate update is not possible, consider implementing firewall rules to restrict access and disabling unused features as a temporary measure.
The vulnerabilities are scheduled for disclosure in April and July 2025, as per the security advisory.
Vulert monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json, providing real-time insights into potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for mysql.
