# RHSA-2025:1671: Security update for 7 packages RHSA-2025:1671, released February 19, 2025, fixes 49 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/rhsa-2025-1671 - Platform: Linux - Released: Feb 19, 2025 - Priority: High (Closes CVE-2024-7264, high severity) - CVEs: 49, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2025:1671 ## Applies to | Product | Release | Fixed in | |---|---|---| | [mysql](https://patchblox.com/security/data/product/linux/mysql.md) | RHEL 9 | 0:8.0.41-2.el9_5 | | [mysql-common](https://patchblox.com/security/data/product/linux/mysql-common.md) | RHEL 9 | 0:8.0.41-2.el9_5 | | [mysql-devel](https://patchblox.com/security/data/product/linux/mysql-devel.md) | RHEL 9 | 0:8.0.41-2.el9_5 | | [mysql-errmsg](https://patchblox.com/security/data/product/linux/mysql-errmsg.md) | RHEL 9 | 0:8.0.41-2.el9_5 | | [mysql-libs](https://patchblox.com/security/data/product/linux/mysql-libs.md) | RHEL 9 | 0:8.0.41-2.el9_5 | | [mysql-server](https://patchblox.com/security/data/product/linux/mysql-server.md) | RHEL 9 | 0:8.0.41-2.el9_5 | | [mysql-test](https://patchblox.com/security/data/product/linux/mysql-test.md) | RHEL 9 | 0:8.0.41-2.el9_5 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-7264](https://patchblox.com/security/data/cve/CVE-2024-7264.md) | High | curl: Multiple issues in curl | 7.5 | 0.2022 | | | [CVE-2024-5535](https://patchblox.com/security/data/cve/CVE-2024-5535.md) | High | OpenSSL: CVE-2024-5535 SSL_select_next_proto buffer overread | 9.1 | 0.0558 | | | [CVE-2024-11053](https://patchblox.com/security/data/cve/CVE-2024-11053.md) | High | curl: This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak used for the first host to... | 7.5 | 0.0197 | | | [CVE-2024-37371](https://patchblox.com/security/data/cve/CVE-2024-37371.md) | High | krb5: This update for krb5 fixes the following issues: - CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with inva... | 9.1 | 0.0186 | | | [CVE-2025-21490](https://patchblox.com/security/data/cve/CVE-2025-21490.md) | High | libmariadb3: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0127 | | | [CVE-2025-21504](https://patchblox.com/security/data/cve/CVE-2025-21504.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0127 | | | [CVE-2025-21521](https://patchblox.com/security/data/cve/CVE-2025-21521.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Thread Pooling) | 7.5 | 0.0110 | | | [CVE-2024-21236](https://patchblox.com/security/data/cve/CVE-2024-21236.md) | High | mysql-router: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0108 | | | [CVE-2025-21518](https://patchblox.com/security/data/cve/CVE-2025-21518.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0107 | | | [CVE-2025-21503](https://patchblox.com/security/data/cve/CVE-2025-21503.md) | High | mysql-client-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0106 | | | [CVE-2025-21505](https://patchblox.com/security/data/cve/CVE-2025-21505.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services) | 7.5 | 0.0106 | | | [CVE-2025-21529](https://patchblox.com/security/data/cve/CVE-2025-21529.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Information Schema) | 7.5 | 0.0105 | | | [CVE-2025-21522](https://patchblox.com/security/data/cve/CVE-2025-21522.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Parser) | 7.5 | 0.0102 | | | [CVE-2025-21525](https://patchblox.com/security/data/cve/CVE-2025-21525.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 7.5 | 0.0102 | | | [CVE-2025-21531](https://patchblox.com/security/data/cve/CVE-2025-21531.md) | High | mecab: MySQL is a multi-user, multi-threaded SQL database server | 7.5 | 0.0102 | | | [CVE-2024-21239](https://patchblox.com/security/data/cve/CVE-2024-21239.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0101 | | | [CVE-2025-21500](https://patchblox.com/security/data/cve/CVE-2025-21500.md) | High | mysql-router: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0101 | | | [CVE-2025-21501](https://patchblox.com/security/data/cve/CVE-2025-21501.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0101 | | | [CVE-2025-21491](https://patchblox.com/security/data/cve/CVE-2025-21491.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0100 | | | [CVE-2025-21534](https://patchblox.com/security/data/cve/CVE-2025-21534.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Performance Schema) | 7.5 | 0.0096 | | | [CVE-2025-21536](https://patchblox.com/security/data/cve/CVE-2025-21536.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0096 | | | [CVE-2024-21218](https://patchblox.com/security/data/cve/CVE-2024-21218.md) | High | mecab: MySQL is a multi-user, multi-threaded SQL database server | 7.5 | 0.0094 | | | [CVE-2024-21219](https://patchblox.com/security/data/cve/CVE-2024-21219.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 7.5 | 0.0094 | | | [CVE-2025-21523](https://patchblox.com/security/data/cve/CVE-2025-21523.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0094 | | | [CVE-2024-21212](https://patchblox.com/security/data/cve/CVE-2024-21212.md) | High | mysql-testsuite: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Health Monitor) | 7.5 | 0.0094 | | | [CVE-2024-21230](https://patchblox.com/security/data/cve/CVE-2024-21230.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0093 | | | [CVE-2024-21193](https://patchblox.com/security/data/cve/CVE-2024-21193.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: PS) | 7.5 | 0.0090 | | | [CVE-2024-21199](https://patchblox.com/security/data/cve/CVE-2024-21199.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0089 | | | [CVE-2024-21201](https://patchblox.com/security/data/cve/CVE-2024-21201.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0089 | | | [CVE-2024-21203](https://patchblox.com/security/data/cve/CVE-2024-21203.md) | High | mecab: MySQL is a multi-user, multi-threaded SQL database server | 7.5 | 0.0089 | | | [CVE-2024-21238](https://patchblox.com/security/data/cve/CVE-2024-21238.md) | High | mecab: MySQL is a multi-user, multi-threaded SQL database server | 7.5 | 0.0088 | | | [CVE-2024-21196](https://patchblox.com/security/data/cve/CVE-2024-21196.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: X Plugin) | 7.5 | 0.0088 | | | [CVE-2024-21231](https://patchblox.com/security/data/cve/CVE-2024-21231.md) | High | mysql-router: Vulnerability in the MySQL Server product of Oracle MySQL (component:Client programs) | 7.5 | 0.0087 | | | [CVE-2024-21241](https://patchblox.com/security/data/cve/CVE-2024-21241.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 7.5 | 0.0087 | | | [CVE-2025-21543](https://patchblox.com/security/data/cve/CVE-2025-21543.md) | High | mecab: MySQL is a multi-user, multi-threaded SQL database server | 7.5 | 0.0086 | | | [CVE-2025-21519](https://patchblox.com/security/data/cve/CVE-2025-21519.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Security: Privileges) | 7.5 | 0.0085 | | | [CVE-2024-21194](https://patchblox.com/security/data/cve/CVE-2024-21194.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0085 | | | [CVE-2024-21197](https://patchblox.com/security/data/cve/CVE-2024-21197.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Information Schema) | 7.5 | 0.0085 | | | [CVE-2024-21198](https://patchblox.com/security/data/cve/CVE-2024-21198.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL) | 7.5 | 0.0085 | | | [CVE-2025-21555](https://patchblox.com/security/data/cve/CVE-2025-21555.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0072 | | | [CVE-2025-21559](https://patchblox.com/security/data/cve/CVE-2025-21559.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0072 | | | [CVE-2024-21237](https://patchblox.com/security/data/cve/CVE-2024-21237.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Group Replication GCS) | 7.5 | 0.0070 | | | [CVE-2024-21247](https://patchblox.com/security/data/cve/CVE-2024-21247.md) | High | mecab: MySQL is a multi-user, multi-threaded SQL database server | 7.5 | 0.0061 | | | [CVE-2025-21546](https://patchblox.com/security/data/cve/CVE-2025-21546.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Security: Privileges) | 7.5 | 0.0056 | | | [CVE-2025-21540](https://patchblox.com/security/data/cve/CVE-2025-21540.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Security: Privileges) | 7.5 | 0.0049 | | | [CVE-2025-21497](https://patchblox.com/security/data/cve/CVE-2025-21497.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0046 | | | [CVE-2024-21213](https://patchblox.com/security/data/cve/CVE-2024-21213.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 7.5 | 0.0031 | | | [CVE-2025-21520](https://patchblox.com/security/data/cve/CVE-2025-21520.md) | High | mecab: MySQL is a multi-user, multi-threaded SQL database server | 7.5 | 0.0030 | | | [CVE-2025-21494](https://patchblox.com/security/data/cve/CVE-2025-21494.md) | High | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Security: Privileges) | 7.5 | 0.0029 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo