Ubuntu alert USN-8363-1 (mysql-8.0, mysql-8.4)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8363-1] MySQL vulnerabilities
Date:
             
 
Tue, 02 Jun 2026 13:57:06 +0000
Message-ID:
             
 
<E1wUPcA-00011A-I0@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8363-1
June 02, 2026

mysql-8.0, mysql-8.4 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in MySQL.

Software Description:
- mysql-8.4: MySQL database
- mysql-8.0: MySQL database

Details:

Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.46 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
Ubuntu 25.10 and Ubuntu 26.04 LTS have been updated to MySQL 8.4.9.

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-...
https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-...
https://www.oracle.com/security-alerts/cpuapr2026.html

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  mysql-server                    8.4.9-0ubuntu0.26.04.1

Ubuntu 25.10
  mysql-server                    8.4.9-0ubuntu0.25.10.1

Ubuntu 24.04 LTS
  mysql-server-8.0                8.0.46-0ubuntu0.24.04.2

Ubuntu 22.04 LTS
  mysql-server-8.0                8.0.46-0ubuntu0.22.04.2

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References:
  https://ubuntu.com/security/notices/USN-8363-1
  CVE-2026-21998, CVE-2026-22001, CVE-2026-22002, CVE-2026-22004,
  CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
  CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276,
  CVE-2026-34278, CVE-2026-34293, CVE-2026-34303, CVE-2026-34304,
  CVE-2026-34308, CVE-2026-34317, CVE-2026-34318, CVE-2026-34319,
  CVE-2026-35236, CVE-2026-35237, CVE-2026-35238, CVE-2026-35239,
  CVE-2026-35240

Package Information:
  https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.9-0ubu...
  https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.9-0ubu...
  https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.46-0ub...
  https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.46-0ub...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=wE+K
-----END PGP SIGNATURE-----