UbuntuUpdates.org

Package "mysql-server"

Name: mysql-server

Description:

MySQL database server (metapackage depending on the latest version)
Latest version: 8.0.41-0ubuntu0.22.04.1
Release: jammy (22.04)
Level: security
Repository: main
Head package: mysql-8.0
Homepage: http://dev.mysql.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "mysql-server"

All arch deb package
APT INSTALL

Other versions of "mysql-server" in Jammy

Repository Area Version
base main 8.0.28-0ubuntu4
updates main 8.0.41-0ubuntu0.22.04.1

Changelog

Version: 8.0.41-0ubuntu0.22.04.1 2025-01-30 15:06:58 UTC

  mysql-8.0 (8.0.41-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Update to 8.0.41 to fix security issues
    - CVE-2025-21490, CVE-2025-21491, CVE-2025-21497, CVE-2025-21500,
      CVE-2025-21501, CVE-2025-21503, CVE-2025-21505, CVE-2025-21519,
      CVE-2025-21522, CVE-2025-21523, CVE-2025-21529, CVE-2025-21540,
      CVE-2025-21546, CVE-2025-21555, CVE-2025-21559

 -- Marc Deslauriers <email address hidden> Thu, 23 Jan 2025 07:33:41 -0500
Source diff to previous version
CVE-2025-21490 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and
CVE-2025-21491 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and
CVE-2025-21497 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and
CVE-2025-21500 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior,
CVE-2025-21501 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior,
CVE-2025-21503 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and
CVE-2025-21505 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.40
CVE-2025-21519 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40
CVE-2025-21522 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.40 and prior, 8.
CVE-2025-21523 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and
CVE-2025-21529 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.40 a
CVE-2025-21540 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40
CVE-2025-21546 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40
CVE-2025-21555 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and
CVE-2025-21559 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and

Version: 8.0.40-0ubuntu0.22.04.1 2024-11-12 14:07:03 UTC

  mysql-8.0 (8.0.40-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Update to 8.0.40 to fix security issues
    - CVE-2024-21193, CVE-2024-21194, CVE-2024-21196, CVE-2024-21197,
      CVE-2024-21198, CVE-2024-21199, CVE-2024-21201, CVE-2024-21212,
      CVE-2024-21213, CVE-2024-21219, CVE-2024-21230, CVE-2024-21231,
      CVE-2024-21236, CVE-2024-21237, CVE-2024-21239, CVE-2024-21241

 -- Marc Deslauriers <email address hidden> Wed, 23 Oct 2024 08:15:00 -0400
Source diff to previous version
CVE-2024-21193 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.39 and prior, 8.4.2
CVE-2024-21194 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and
CVE-2024-21196 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are 8.0.39 and prior,
CVE-2024-21197 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.39 a
CVE-2024-21198 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior, 8.4.2
CVE-2024-21199 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and
CVE-2024-21201 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior,
CVE-2024-21212 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Health Monitor). Supported versions that are affected are 8.0.39 and p
CVE-2024-21213 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and
CVE-2024-21219 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.39 and prior, 8.4.2
CVE-2024-21230 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior,
CVE-2024-21231 Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 8.0.39 and prior, 8
CVE-2024-21236 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and
CVE-2024-21237 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are 8.0.3
CVE-2024-21239 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and
CVE-2024-21241 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior,

Version: 8.0.39-0ubuntu0.22.04.1 2024-07-31 14:07:10 UTC

  mysql-8.0 (8.0.39-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Update to 8.0.39 to fix security issues
    - CVE-2024-20996, CVE-2024-21125, CVE-2024-21127, CVE-2024-21129,
      CVE-2024-21130, CVE-2024-21134, CVE-2024-21142, CVE-2024-21162,
      CVE-2024-21163, CVE-2024-21165, CVE-2024-21171, CVE-2024-21173,
      CVE-2024-21177, CVE-2024-21179, CVE-2024-21185

 -- Marc Deslauriers <email address hidden> Wed, 24 Jul 2024 07:08:12 -0400
Source diff to previous version
CVE-2024-20996 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0
CVE-2024-21125 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.37 and prior and 8
CVE-2024-21127 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8
CVE-2024-21129 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8
CVE-2024-21130 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior
CVE-2024-21134 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 8.0.37
CVE-2024-21142 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.37
CVE-2024-21162 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior
CVE-2024-21163 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior
CVE-2024-21165 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.37 and p
CVE-2024-21171 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior
CVE-2024-21173 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0
CVE-2024-21177 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior
CVE-2024-21179 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0
CVE-2024-21185 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.38, 8.4.1 and 9.0.0. Ea

Version: 8.0.37-0ubuntu0.22.04.3 2024-06-11 14:07:07 UTC

  mysql-8.0 (8.0.37-0ubuntu0.22.04.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Update to 8.0.37 to fix security issues
    - CVE-2024-20994, CVE-2024-20998, CVE-2024-21000, CVE-2024-21008,
      CVE-2024-21009, CVE-2024-21013, CVE-2024-21047, CVE-2024-21054,
      CVE-2024-21060, CVE-2024-21062, CVE-2024-21069, CVE-2024-21087,
      CVE-2024-21096, CVE-2024-21102
    - debian/patches/revert_faster_tls_model.patch: updated for new
      version.

 -- Marc Deslauriers <email address hidden> Tue, 30 Apr 2024 09:06:50 -0400
Source diff to previous version
CVE-2024-20994 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.36 a
CVE-2024-20998 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior
CVE-2024-21000 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.36
CVE-2024-21008 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior
CVE-2024-21009 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior
CVE-2024-21013 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior
CVE-2024-21047 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0
CVE-2024-21054 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior
CVE-2024-21060 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.36 and
CVE-2024-21062 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior
CVE-2024-21069 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.36 and prior and 8
CVE-2024-21087 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.
CVE-2024-21096 Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior
CVE-2024-21102 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.36 and p

Version: 8.0.36-0ubuntu0.22.04.1 2024-01-30 15:08:41 UTC

  mysql-8.0 (8.0.36-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Update to 8.0.36 to fix security issues
    - CVE-2024-20960, CVE-2024-20961, CVE-2024-20962, CVE-2024-20963,
      CVE-2024-20964, CVE-2024-20965, CVE-2024-20966, CVE-2024-20967,
      CVE-2024-20969, CVE-2024-20970, CVE-2024-20971, CVE-2024-20972,
      CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977,
      CVE-2024-20978, CVE-2024-20981, CVE-2024-20982, CVE-2024-20983,
      CVE-2024-20984, CVE-2024-20985
    - debian/patches/revert_faster_tls_model.patch: updated for new
      version.
  * Removed patch no longer needed with 8.0.35+
    - debian/patches/revert-be8348a7.patch: fix crash on startup on armhf
  * Enable test suite on armhf (LP: #2024276)
    - debian/rules: check for failures in armhf tests
    - debian/patches/suppress_armhf_test_warning.patch: suppress warning
      about the CYCLE timer not being available on armhf. (LP: #1999075)
    - debian/patches/disable_64bits_time_armhf.patch: specify armhf doesn't
      have a 64bit timer in mysql-test/include/have_64bits_time.inc.

 -- Marc Deslauriers <email address hidden> Wed, 17 Jan 2024 15:13:42 -0500
2024276 MySQL 8.0 in Ubuntu ignores MTR test results, allowing faulty packages to users
1999075 autopkgtest fails for 8.0.31 on armhf
CVE-2024-20961 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior
CVE-2024-20963 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.35
CVE-2024-20965 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior
CVE-2024-20967 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.35 and prio
CVE-2024-20969 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.35 and prior and 8
CVE-2024-20971 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior
CVE-2024-20973 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior
CVE-2024-20977 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior
CVE-2024-20981 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.35 and prior and 8
CVE-2024-20983 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easil
CVE-2024-20985 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.35 and prior and 8


About   -   Send Feedback to @ubuntu_updates