Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2023:3087

Опубликовано: 28 июн. 2026
Источник: rocky
Оценка: Important

Описание

Important: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177734, BZ#2177735, BZ#2177736)

Security Fix(es):

  • mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)

  • mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)

  • mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)

  • mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)

  • mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)

  • mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)

  • mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)

  • mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)

  • mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)

  • mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Rocky Linux8 AppStream and Devel channels missing mecab-devel rpm (BZ#2180411)

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
mecabx86_642.module+el8.10.0+1676+9b4b6e24mecab-0.996-2.module+el8.10.0+1676+9b4b6e24.x86_64.rpm
mecab-develx86_642.module+el8.10.0+1676+9b4b6e24mecab-devel-0.996-2.module+el8.10.0+1676+9b4b6e24.x86_64.rpm
mecab-ipadicx86_6416.module+el8.10.0+1676+9b4b6e24mecab-ipadic-2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24.x86_64.rpm
mecab-ipadic-EUCJPx86_6416.module+el8.10.0+1676+9b4b6e24mecab-ipadic-EUCJP-2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24.x86_64.rpm
mecabx86_642.module+el8.10.0+1937+28fbbc83mecab-0.996-2.module+el8.10.0+1937+28fbbc83.x86_64.rpm
mecabx86_642.module+el8.10.0+2091+db4d14f6mecab-0.996-2.module+el8.10.0+2091+db4d14f6.x86_64.rpm
mecab-develx86_642.module+el8.10.0+1937+28fbbc83mecab-devel-0.996-2.module+el8.10.0+1937+28fbbc83.x86_64.rpm
mecab-develx86_642.module+el8.10.0+2091+db4d14f6mecab-devel-0.996-2.module+el8.10.0+2091+db4d14f6.x86_64.rpm

Показывать по

Связанные CVE

CVE-2022-21594
CVE-2022-21599
CVE-2022-21604
CVE-2022-21608
CVE-2022-21611
CVE-2022-21617
CVE-2022-21625
CVE-2022-21632
CVE-2022-21633
CVE-2022-21637
CVE-2022-21640
CVE-2022-39400
CVE-2022-39408
CVE-2022-39410
CVE-2023-21836
CVE-2023-21863
CVE-2023-21864
CVE-2023-21865
CVE-2023-21867
CVE-2023-21868
CVE-2023-21869
CVE-2023-21870
CVE-2023-21871
CVE-2023-21873
CVE-2023-21874
CVE-2023-21875
CVE-2023-21876
CVE-2023-21877
CVE-2023-21878
CVE-2023-21879
CVE-2023-21880
CVE-2023-21881
CVE-2023-21882
CVE-2023-21883
CVE-2023-21887
CVE-2023-21912
CVE-2023-21913
CVE-2023-21917
CVE-2023-21963
CVE-2023-22015
CVE-2023-22026
CVE-2023-22028

Ссылки на источники

Исправления

Связанные уязвимости

oracle-oval логотип

ELSA-2023-3087

oracle-oval
около 3 лет назад

ELSA-2023-3087: mysql:8.0 security, bug fix, and enhancement update (IMPORTANT)

oracle-oval логотип

ELSA-2023-2621

oracle-oval
около 3 лет назад

ELSA-2023-2621: mysql security update (IMPORTANT)

ubuntu логотип

CVE-2022-21594

CVSS3: 4.9
ubuntu
почти 4 года назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

redhat логотип

CVE-2022-21594

CVSS3: 4.9
redhat
почти 4 года назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

nvd логотип

CVE-2022-21594

CVSS3: 4.9
nvd
почти 4 года назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).