CVE-2025-21490
MediumAdvisory
Published 21 Jan 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.9
- base score, highest
- EPSS
- 0.013
- 68th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 177
- of 17,781 indexed, latest versions
- Container images
- 194
- deployed by those charts
- Fix available
- 8 of 12
- affected packages
mariadb-10.5 - security update
Carried by container images the latest versions of 177 of 17,781 indexed charts deploy, on 194 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| mariadbdeb | 1:10.11.3-1, 1:10.11.4-1~deb12u1, 1:10.11.6-0+deb12u1, 1:10.11.7+maria~deb12+3 more | 1:10.11.11-0+deb12u1, 1:10.11.11-0ubuntu0.24.04.2 | 61 |
| mysql-8.0deb | 8.0.23-0ubuntu0.20.04.1, 8.0.25-0ubuntu0.20.04.1, 8.0.26-0ubuntu0.20.04.2, 8.0.26-0ubuntu0.20.04.3+15 more | 8.0.41-0ubuntu0.20.04.1, 8.0.41-0ubuntu0.22.04.1, 8.0.41-0ubuntu0.24.04.1 | 37 |
| mariadbapk | 10.11.4-r0, 10.11.5-r0, 10.11.5-r3, 10.11.6-r0+3 more | 10.11.11-r0, 11.4.5-r0 | 16 |
| mariadbbitnami | 10.6.12-2, 10.6.12-3, 10.11.4-1, 11.2.6-0+4 more | 10.5.28 | 9 |
| mysql-5.7deb | 5.7.20-0ubuntu0.16.04.1, 5.7.29-0ubuntu0.18.04.1, 5.7.32-0ubuntu0.18.04.1, 5.7.33-0ubuntu0.18.04.1+2 more | no fix listed | 6 |
| MariaDBbitnami | 10.11.4, 11.3.2-5 | 10.5.28 | 2 |
| mariadb-10.1deb | 1:10.1.47-0ubuntu0.18.04.1, 1:10.1.48-0ubuntu0.18.04.1 | no fix listed | 2 |
| mysql-5.5deb | 5.5.60-0ubuntu0.14.04.1, 5.5.62-0ubuntu0.14.04.1 | no fix listed | 2 |
| mysql-clientbitnami | 10.6.11-1, 10.11.10-0 | 10.6.21 | 2 |
| mariadb-10.3deb | 1:10.3.34-0ubuntu0.20.04.1 | no fix listed | 1 |
| mariadb-10.6deb | 1:10.6.7-2ubuntu1 | 1:10.6.21-0ubuntu0.22.04.2 | 1 |
| mariadb-10.5deb | 1:10.5.11-1, 1:10.5.12-0+deb11u1, 1:10.5.15-0+deb11u1, 1:10.5.18-0+deb11u1+3 more | 1:10.5.28-0+deb11u1 | 60 |
- OSV records
- ALPINE-CVE-2025-21490BIT-mariadb-2025-21490BIT-mysql-client-2025-21490DEBIAN-CVE-2025-21490UBUNTU-CVE-2025-21490DLA-4074-1
- Also known as
- BIT-mariadb-min-2025-21490, USN-7245-1, USN-7376-2
Charts affected
177 by stars
Container images carrying it
194 by charts deploying them
A fixed version is listed for 8 of the 12 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apache/ | ae0b86d3c4d0 | mysql-8.0 | 8.0.41-0ubuntu0.24.04.1 | 2 |
| bitnamilegacy/ | 33ce23601fc9 | mariadb | 10.5.28 | 2 |
| freeradius/ | 21c8bfa904d8 | mysql-5.7 | no fix listed | 2 |
| gjeanmart/ | 926264c8f2d1 | mariadb | 1:10.11.11-0+deb12u1 | 2 |
| library/ | 0abf60f81588 | mysql-8.0 | 8.0.41-0ubuntu0.22.04.1 | 2 |
| library/ | eedf63967cdb | mariadb | 1:10.11.11-0+deb12u1 | 2 |
| moreillon/ | e1c9bfab5c16 | mariadb | 1:10.11.11-0+deb12u1 | 2 |
| pecan/ | f825d480cd62 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 2 |
| postgis/ | a2fc46b52819 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 2 |
| qichenxu4pd/ | f3a8502bc21b | mariadb | 1:10.11.11-0+deb12u1 | 2 |
| vaultwarden/ | 39f34c5159a2 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 2 |
| yzhou442/ | a3f7ca69e28d | mysql-client | 10.6.21 | 2 |
| ghcr.io/ | 5be52524664c | mysql-8.0 | 8.0.41-0ubuntu0.22.04.1 | 2 |
| ghcr.io/ | 4ee0764310e7 | mariadb-10.1 mysql-5.7 | no fix listed no fix listed | 2 |
| allegroai/ | fca885e8cfc6 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| allegroai/ | c58d9da7bdf8 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| apache/ | 64e58748b6b9 | mariadb | 1:10.11.11-0+deb12u1 | 1 |
| apache/ | ce90bdc3d2af | mariadb | 1:10.11.11-0+deb12u1 | 1 |
| apache/ | e5560ad0b86e | mariadb | 1:10.11.11-0+deb12u1 | 1 |
| apache/ | 975ab033580d | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| apache/ | ab9467fd712c | mariadb | 1:10.11.11-0+deb12u1 | 1 |
| archish27/ | 6610071a2101 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| assistiot/ | 8b5d118bdf0e | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| assistiot/ | b1dbe4d62a03 | mariadb | 1:10.11.11-0+deb12u1 | 1 |
| avinash263/ | aa2b8727f1a6 | mariadb | 1:10.11.11-0+deb12u1 | 1 |
| azhar008/ | a1e827b0adea | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| bitnamilegacy/ | cb8ab5515676 | mysql-client | 10.6.21 | 1 |
| bitnamilegacy/ | 15edb5643b73 | mariadb | 10.5.28 | 1 |
| bitnamilegacy/ | 320c70dfd914 | mariadb MariaDB | 10.5.28 10.5.28 | 1 |
| bitnamilegacy/ | 373c3c260571 | mariadb | 10.5.28 | 1 |
| bitnamilegacy/ | 78847062532a | mariadb | 10.5.28 | 1 |
| bitnamilegacy/ | 8b3778160e34 | mariadb | 10.5.28 | 1 |
| bitnamilegacy/ | 8bc50a0961a7 | mariadb | 10.5.28 | 1 |
| bitnami/ | 16a7dae804fb | mariadb | 10.5.28 | 1 |
| bnjbvr/ | 37e216b182c8 | mariadb | 1:10.11.11-0+deb12u1 | 1 |
| buntha/ | 154542cc3083 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| camerahub/ | a5af37dd6e1b | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| carlosmz87/ | 8ffa63aa995d | mariadb | 1:10.11.11-0+deb12u1 | 1 |
| chetangautamm/ | b4b94155ff5a | mysql-5.5 | no fix listed | 1 |
| danuk/ | 026560388070 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| djjudas21/ | 17fc245e29bd | mariadb | 10.11.11-r0 | 1 |
| douz/ | 4384103d0219 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| elyra/ | c922f1f1646a | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| engrmth/ | 6d8464e6f0e8 | mysql-8.0 | 8.0.41-0ubuntu0.20.04.1 | 1 |
| erlangsolutions/ | 4680c990147a | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| evk02/ | ef6ff257ef35 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| factly/ | ca5bc71d1d5c | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| fanzynoodle/ | 5f9916c1a287 | mariadb-10.5 | 1:10.5.28-0+deb11u1 | 1 |
| galaxy/ | 8e577a626dfd | mysql-5.5 | no fix listed | 1 |
| gethue/ | 11b649636e68 | mysql-8.0 | 8.0.41-0ubuntu0.20.04.1 | 1 |