USN-6615-1: MySQL vulnerabilities
24848
07 August 2024
25 July 2024
CLOSED
MEDIUM
CVE-2024-20960;CVE-2024-20961;CVE-2024-20962;CVE-2024-20963;CVE-2024-20964;CVE-2024-20965;CVE-2024-20966;CVE-2024-20967;CVE-2024-20969;CVE-2024-20970;CVE-2024-20971;CVE-2024-20972;CVE-2024-20973;CVE-2024-20974;CVE-2024-20976;CVE-2024-20977;CVE-2024-20978;CVE-2024-20981;CVE-2024-20982;CVE-2024-20983;CVE-2024-20984;CVE-2024-20985
Severity
medium
Vendor
VMware Tanzu
Versions Affected
- Canonical Ubuntu 22.04
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.36 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.10. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-36.html https://www.oracle.com/security-alerts/cpujan2024.html Update Instructions: Run `sudo pro fix USN-6615-1` to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: mysql-client - 8.0.36-0ubuntu0.20.04.1 libmysqlclient-dev - 8.0.36-0ubuntu0.20.04.1 mysql-testsuite-8.0 - 8.0.36-0ubuntu0.20.04.1 mysql-router - 8.0.36-0ubuntu0.20.04.1 mysql-server - 8.0.36-0ubuntu0.20.04.1 libmysqlclient21 - 8.0.36-0ubuntu0.20.04.1 mysql-client-core-8.0 - 8.0.36-0ubuntu0.20.04.1 mysql-server-core-8.0 - 8.0.36-0ubuntu0.20.04.1 mysql-server-8.0 - 8.0.36-0ubuntu0.20.04.1 mysql-testsuite - 8.0.36-0ubuntu0.20.04.1 mysql-client-8.0 - 8.0.36-0ubuntu0.20.04.1 mysql-source-8.0 - 8.0.36-0ubuntu0.20.04.1 No subscription required
Fixed VMware Products and Versions
- Operations Manager
- 3.0.24+LTS-T or greater
References
https://ubuntu.com/security/notices/USN-6615-1
https://www.cloudfoundry.org/blog/usn-6615-1
https://cve.mitre.org/cgi-bin/cvename.cgi?name=usn-6615-1
History
2024-01-30: Initial vulnerability report published.