Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2025-21588 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.4.0-8.4.4 and 9.0.0- | mysql-8.4 mysql-8.4 mysql-8.4 mysql-8.4 |
| CVE | CVE-2025-21585 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4 | mysql-8.4 mysql-8.0 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 |
| CVE | CVE-2025-21584 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4 | mysql-8.4 mysql-8.0 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 |
| CVE | CVE-2025-21581 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4 | mysql-8.4 mysql-8.0 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 |
| CVE | CVE-2025-21580 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4 | mysql-8.4 mysql-8.0 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 |
| CVE | CVE-2025-21579 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0 | mysql-8.4 mysql-8.0 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 |
| CVE | CVE-2025-21577 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 an | mysql-8.4 mysql-8.0 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 |
| CVE | CVE-2025-21575 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0- | mysql-8.4 mysql-8.0 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 |
| CVE | CVE-2025-21574 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0- | mysql-8.4 mysql-8.0 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.4 mysql-8.4 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 mysql-8.0 |
| CVE | CVE-2025-30472 | Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_con | corosync corosync corosync corosync corosync corosync corosync corosync corosync corosync corosync corosync corosync corosync corosync corosync |
| CVE | CVE-2025-31498 | c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in read_answers() when process_answer() may re-enqu | c-ares c-ares c-ares c-ares c-ares c-ares |
| Launchpad | 2102674 | Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 | linux-azure-nvidia linux-azure-nvidia linux-azure-nvidia linux-azure-nvidia |
| Launchpad | 2107816 | warning at iommu_dma_unmap_page when running ibv_rc_pingpong | linux-azure-nvidia linux-azure-nvidia linux-azure-nvidia linux-azure-nvidia |
| Launchpad | 2109536 | azure: pull \ | linux-azure-nvidia linux-azure-nvidia linux-azure-nvidia linux-azure-nvidia |
| Launchpad | 2076173 | cannot display sensor name when its owner is lun1 | ipmitool ipmitool ipmitool ipmitool ipmitool |
| CVE | CVE-2025-37838 | In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due t | linux linux-realtime linux-aws linux-oracle linux-azure linux linux-gcp |
| Launchpad | 2106281 | Null pointer dereference in gVNIC driver | linux linux-realtime linux-aws linux-oracle linux-azure linux linux-gcp |
| Launchpad | 2106661 | Plucky update: v6.14.1 upstream stable release | linux linux-realtime linux-aws linux-oracle linux-azure linux linux-gcp |
| Launchpad | 2107212 | Plucky update: v6.14.2 upstream stable release | linux linux-realtime linux-aws linux-oracle linux-azure linux linux-gcp |
| Launchpad | 2108854 | Plucky update: v6.14.3 upstream stable release | linux linux-realtime linux-aws linux-oracle linux-azure linux linux-gcp |
About
-
Send Feedback to @ubuntu_updates
