Moderate Security Update for MySQL 8.4: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:23008: Moderate: mysql8.4 security update. Affects mysql8.4 versions < 8.4.7-1.el10_1. Fixed in 8.4.7-1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MySQL is a widely-used multi-user, multi-threaded SQL database server that operates on a client/server model. It consists of a server daemon (mysqld) and various client programs and libraries. The MySQL 8.4 package includes essential client programs and generic files necessary for database operations. This version has been identified to contain several unspecified vulnerabilities that could potentially compromise the integrity and security of the database.
Vulnerability Detail
The vulnerabilities in MySQL 8.4 include unspecified issues related to Data Manipulation Language (DML), InnoDB storage engine, and the Optimizer. These vulnerabilities were disclosed in the October 2025 Critical Patch Update (CPU) and could lead to unauthorized access, data corruption, or denial of service. The specific CVEs associated with these vulnerabilities include CVE-2025-53040, CVE-2025-53042, CVE-2025-53044, CVE-2025-53045, CVE-2025-53053, CVE-2025-53054, CVE-2025-53062, and CVE-2025-53069.
How To Fix
Minimum fixed version
8.4.7-1.el10_1
This is the first release that contains the fix.
sudo dnf update mysql8.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, consider restricting access to the MySQL server by configuring firewall rules to limit connections only to trusted IP addresses. Additionally, ensure that all user accounts have strong passwords and unnecessary accounts are disabled.
Conclusion
The MySQL 8.4 security update addresses several critical vulnerabilities that could impact the security and integrity of database operations. It is crucial to update to the patched version to mitigate these risks. Implementing temporary workarounds can help secure the system until the update is applied.
See every vulnerability recorded for mysql8.4 →
FAQ
The vulnerabilities are unspecified issues related to DML, InnoDB, and the Optimizer that could lead to unauthorized access or data corruption.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file. Visit Vulert Scanner to check your application without needing to sign up.
Implement firewall rules to restrict access and ensure strong passwords for user accounts as a temporary workaround.
As of now, specific exploits for these vulnerabilities have not been publicly disclosed, but they pose a risk to database integrity and security.
For detailed information, refer to the CVE pages associated with the vulnerabilities, such as CVE-2025-53040, CVE-2025-53042, etc.
Related vulnerabilities
Recent vulnerabilities recorded for mysql8.4.
