Ubuntu alert USN-8363-2 (mysql-8.0)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8363-2] MySQL vulnerabilities
Date:
             
 
Wed, 03 Jun 2026 13:23:38 +0000
Message-ID:
             
 
<E1wUlZK-0004Pn-4z@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8363-2
June 03, 2026

mysql-8.0 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS

Summary:

Several security issues were fixed in MySQL.

Software Description:
- mysql-8.0: MySQL database

Details:

USN-8363-1 fixed several vulnerabilities in MySQL. This update
provides the corresponding fixes for MySQL on Ubuntu 20.04 LTS.

Original advisory details:

 Multiple security issues were discovered in MySQL and this update includes
 new upstream MySQL versions to fix these issues.

 MySQL has been updated to 8.0.46 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
 Ubuntu 25.10 and Ubuntu 26.04 LTS have been updated to MySQL 8.4.9.

 In addition to security fixes, the updated packages contain bug fixes, new
 features, and possibly incompatible changes.

 Please see the following for more information:

 https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-...
 https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-...
 https://www.oracle.com/security-alerts/cpuapr2026.html

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  mysql-server-8.0                8.0.46-0ubuntu0.20.04.1+esm2
                                  Available with Ubuntu Pro

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References:
  https://ubuntu.com/security/notices/USN-8363-2
  https://ubuntu.com/security/notices/USN-8363-1
  CVE-2026-21998, CVE-2026-22001, CVE-2026-22002, CVE-2026-22004,
  CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017,
  CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276,
  CVE-2026-34278, CVE-2026-34293, CVE-2026-34303, CVE-2026-34304,
  CVE-2026-34308, CVE-2026-34317, CVE-2026-34318, CVE-2026-34319,
  CVE-2026-35236, CVE-2026-35237, CVE-2026-35238, CVE-2026-35239,
  CVE-2026-35240


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=MS7t
-----END PGP SIGNATURE-----