Ubuntu alert USN-8457-2 (mysql-8.0)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8457-2] MySQL vulnerabilities
Date:
             
 
Wed, 24 Jun 2026 09:40:08 +0000
Message-ID:
             
 
<E1wcK5Y-00019m-Ri@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8457-2
June 24, 2026

mysql-8.0 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS

Summary:

Several security issues were fixed in MySQL.

Software Description:
- mysql-8.0: MySQL database

Details:

USN-8457-1 fixed several vulnerabilities in MySQL. This update
provides the corresponding fixes for MySQL on Ubuntu 20.04 LTS

Original advisory details:

 It was discovered that MySQL Router incorrectly handled repeated TLS
 protocol upgrade requests. An unauthenticated remote attacker could
 possibly use this issue to cause MySQL Router to crash, resulting in a
 denial of service. (CVE-2026-46862)

 It was discovered that MySQL Server incorrectly handled connection
 authentication. An unauthenticated remote attacker could possibly use this
 issue to cause MySQL to crash, resulting in a denial of service.
 (CVE-2026-46863)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  mysql-router                    8.0.46-0ubuntu0.20.04.1+esm3
                                  Available with Ubuntu Pro
  mysql-server                    8.0.46-0ubuntu0.20.04.1+esm3
                                  Available with Ubuntu Pro
  mysql-server-8.0                8.0.46-0ubuntu0.20.04.1+esm3
                                  Available with Ubuntu Pro
  mysql-server-core-8.0           8.0.46-0ubuntu0.20.04.1+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8457-2
  https://ubuntu.com/security/notices/USN-8457-1
  CVE-2026-46862, CVE-2026-46863


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=0wg5
-----END PGP SIGNATURE-----