Ubuntu alert USN-7691-1 (mysql-8.0, mysql-8.4)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7691-1] MySQL vulnerabilities
Date:
             
 
Wed, 13 Aug 2025 14:36:14 +0000
Message-ID:
             
 
<E1umCaM-0007SB-BF@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7691-1
August 13, 2025

mysql-8.0, mysql-8.4 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in MySQL.

Software Description:
- mysql-8.4: MySQL database
- mysql-8.0: MySQL database

Details:

Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.43 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
Ubuntu 25.04 has been updated to MySQL 8.4.6.

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-...
https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-...
https://www.oracle.com/security-alerts/cpujul2025.html

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  mysql-server                    8.4.6-0ubuntu0.25.04.1

Ubuntu 24.04 LTS
  mysql-server-8.0                8.0.43-0ubuntu0.24.04.1

Ubuntu 22.04 LTS
  mysql-server-8.0                8.0.43-0ubuntu0.22.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References:
  https://ubuntu.com/security/notices/USN-7691-1
  CVE-2025-50077, CVE-2025-50078, CVE-2025-50079, CVE-2025-50080,
  CVE-2025-50081, CVE-2025-50082, CVE-2025-50083, CVE-2025-50084,
  CVE-2025-50085, CVE-2025-50086, CVE-2025-50087, CVE-2025-50091,
  CVE-2025-50092, CVE-2025-50093, CVE-2025-50094, CVE-2025-50096,
  CVE-2025-50097, CVE-2025-50098, CVE-2025-50099, CVE-2025-50100,
  CVE-2025-50101, CVE-2025-50102, CVE-2025-50104, CVE-2025-53023

Package Information:
  https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.6-0ubu...
  https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.43-0ub...
  https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.43-0ub...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=eY2E
-----END PGP SIGNATURE-----