Moderate Security Vulnerability in MySQL Packages: Update Required
Summary
ALSA-2025:23109: Moderate: mysql security update. Affects mysql versions < 8.0.44-1.el9_7. Fixed in 8.0.44-1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MySQL is a widely-used, multi-user, multi-threaded SQL database server known for its reliability and performance. It includes the MySQL server daemon (mysqld) along with various client programs and libraries that facilitate database management and operations. As a critical component in many applications, MySQL's security is paramount, and vulnerabilities can lead to unauthorized access or data manipulation.
Vulnerability Detail
The vulnerability affects multiple components of MySQL, including DML, InnoDB, and the optimizer. These unspecified vulnerabilities, disclosed in the October 2025 CPU, could allow attackers to exploit weaknesses in the database's handling of data, potentially leading to data corruption, unauthorized access, or denial of service. The vulnerabilities are identified by CVEs such as CVE-2025-53040, CVE-2025-53042, CVE-2025-53044, CVE-2025-53045, CVE-2025-53053, CVE-2025-53054, CVE-2025-53062, and CVE-2025-53069.
How To Fix
Minimum fixed version
8.0.44-1.el9_7
This is the first release that contains the fix.
sudo dnf update mysqlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can restrict access to the MySQL server by configuring the firewall to limit connections to trusted IP addresses only. This can help mitigate the risk of exploitation until the packages are updated.
Conclusion
The MySQL security update addresses several vulnerabilities that could compromise the integrity and security of the database. It is crucial for users to update their MySQL packages to the latest patched version to safeguard against potential exploits. Implementing temporary workarounds can help mitigate risks until updates are applied.
See every vulnerability recorded for mysql →
FAQ
The vulnerabilities are unspecified issues that affect various components of MySQL, potentially allowing unauthorized access or data manipulation.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Simply upload your manifest file like package-lock.json to check for vulnerabilities.
If immediate updates are not possible, consider implementing firewall rules to restrict access to your MySQL server as a temporary workaround.
As of now, the vulnerabilities are unspecified, and there are no known exploits publicly available. However, it is crucial to apply the updates as soon as possible to mitigate any potential risks.
For detailed information, refer to the CVE pages associated with the vulnerabilities, such as CVE-2025-53040, CVE-2025-53042, and others listed in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for mysql.
