Ubuntu alert USN-7873-1 (mysql-8.0, mysql-8.4)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7873-1] MySQL vulnerabilities
Date:
             
 
Wed, 19 Nov 2025 17:15:37 +0000
Message-ID:
             
 
<E1vLlmL-0000Lq-P7@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7873-1
November 19, 2025

mysql-8.0, mysql-8.4 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 25.04
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in MySQL.

Software Description:
- mysql-8.4: MySQL database
- mysql-8.0: MySQL database

Details:

Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
Ubuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7.

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-...
https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-...
https://www.oracle.com/security-alerts/cpuoct2025.html

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  mysql-server                    8.4.7-0ubuntu0.25.10.2

Ubuntu 25.04
  mysql-server                    8.4.7-0ubuntu0.25.04.1

Ubuntu 24.04 LTS
  mysql-server-8.0                8.0.44-0ubuntu0.24.04.1

Ubuntu 22.04 LTS
  mysql-server-8.0                8.0.44-0ubuntu0.22.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References:
  https://ubuntu.com/security/notices/USN-7873-1
  CVE-2025-53040, CVE-2025-53042, CVE-2025-53044, CVE-2025-53045,
  CVE-2025-53053, CVE-2025-53054, CVE-2025-53062, CVE-2025-53069

Package Information:
  https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubu...
  https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubu...
  https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ub...
  https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ub...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmkd+y4ACgkQcpJm3tlz
hgHnQw/9HkPSjId3PSANsHGmA3lDwZlN+wwDLniDZGuYJTqlU3QbnsU2lcQyhZNX
AQ8Hl5ArRg5qoAL+ssvvQT1DdD0I3ThxPL3c65OZTCEc4oh4FRRa4yOgSuFZFrkt
88RPJLatMZJQcVyEPMa4MHuwyhHW1QgBX0gkGNbeT4+M8HZX9sMYdEHmB7UfUVqq
dhLEdjJ5JQ4xYoBzrur51kzWgx2vZftH6BPjTUlloVIZED8jL8n8ZILwbQWc4viO
XRsTmcs1PZdmq4WPSTu60Wm7DuUq/7gx3I8fn4f+YHpnGo/cwyXvcV8+YLQa98Vx
RC3OnG47bm3T1cNPZTLmqWyy4tpy21z0rn6COQGaDL9l3MDUhDcynZO4Trk2EXhu
LYJCNf/TG2ZUK/pKsf95NPMxYS+u0aKHctUAOM/XMximxnQ1/fgpcmhVAHRVa9hi
zwnodyl9iFZv3zzE9GDrgeI9/CHTaTAz1Zn7hfrxhi+lYGXmXBHgpdZmEcrFMcvR
ezNkmMzG2ta9oIyTB/GT2D+EBlB2ne6m4vnQJJCR7xyw9V2ZwDVhWw29YjkQcJoH
/4ZZ5S3FPS/ZoyJhVhUzlFoN2odzvqNGS9JUe1VZisSntcJgnp3/2BO/KwJgqk/Y
qEHvq7Hc9sYmVsFmuY07mXXr8VUDxTJThzImAcvIB28Z4+ZhBSM=
=V9mh
-----END PGP SIGNATURE-----