RLSA-2023:3087

Synopsis

Important: mysql:8.0 security, bug fix, and enhancement update

Description

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177734, BZ#2177735, BZ#2177736)

Security Fix(es):

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)

* mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)

* mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)

* mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)

* mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)

* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)

* mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)

* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)

* mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)

* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Rocky Linux8 AppStream and Devel channels missing mecab-devel rpm (BZ#2180411)

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2142861 2142863 2142865 2142868 2142869 2142870 2142871 2142872 2142873 2142875 2142877 2142879 2142880 2142881 2162268 2162270 2162271 2162272 2162274 2162275 2162276 2162277 2162278 2162280 2162281 2162282 2162283 2162284 2162285 2162286 2162287 2162288 2162289 2162290 2162291 2188110 2188111 2188112 2188126 2245011 2245012 2245013

CVEs

CVE-2022-21594 CVE-2022-21599 CVE-2022-21604 CVE-2022-21608 CVE-2022-21611 CVE-2022-21617 CVE-2022-21625 CVE-2022-21632 CVE-2022-21633 CVE-2022-21637 CVE-2022-21640 CVE-2022-39400 CVE-2022-39408 CVE-2022-39410 CVE-2023-21836 CVE-2023-21863 CVE-2023-21864 CVE-2023-21865 CVE-2023-21867 CVE-2023-21868 CVE-2023-21869 CVE-2023-21870 CVE-2023-21871 CVE-2023-21873 CVE-2023-21874 CVE-2023-21875 CVE-2023-21876 CVE-2023-21877 CVE-2023-21878 CVE-2023-21879 CVE-2023-21880 CVE-2023-21881 CVE-2023-21882 CVE-2023-21883 CVE-2023-21887 CVE-2023-21912 CVE-2023-21913 CVE-2023-21917 CVE-2023-21963 CVE-2023-22015 CVE-2023-22026 CVE-2023-22028

Affected packages

Rocky Linux 8 aarch64 - AppStream

mecab-0:0.996-2.module+el8.10.0+2091+db4d14f6.aarch64.rpm mecab-0:0.996-2.module+el8.10.0+1676+9b4b6e24.aarch64.rpm mecab-0:0.996-2.module+el8.10.0+1937+28fbbc83.aarch64.rpm mecab-0:0.996-2.module+el8.10.0+1937+28fbbc83.src.rpm mecab-0:0.996-2.module+el8.10.0+2091+db4d14f6.src.rpm mecab-0:0.996-2.module+el8.10.0+1676+9b4b6e24.src.rpm mecab-debuginfo-0:0.996-2.module+el8.10.0+1937+28fbbc83.aarch64.rpm mecab-debuginfo-0:0.996-2.module+el8.10.0+2091+db4d14f6.aarch64.rpm mecab-debuginfo-0:0.996-2.module+el8.10.0+1676+9b4b6e24.aarch64.rpm mecab-debugsource-0:0.996-2.module+el8.10.0+1937+28fbbc83.aarch64.rpm mecab-debugsource-0:0.996-2.module+el8.10.0+2091+db4d14f6.aarch64.rpm mecab-debugsource-0:0.996-2.module+el8.10.0+1676+9b4b6e24.aarch64.rpm mecab-devel-0:0.996-2.module+el8.10.0+1676+9b4b6e24.aarch64.rpm mecab-devel-0:0.996-2.module+el8.10.0+2091+db4d14f6.aarch64.rpm mecab-devel-0:0.996-2.module+el8.10.0+1937+28fbbc83.aarch64.rpm mecab-ipadic-0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24.aarch64.rpm mecab-ipadic-0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24.src.rpm mecab-ipadic-EUCJP-0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

mecab-0:0.996-2.module+el8.10.0+1676+9b4b6e24.src.rpm mecab-0:0.996-2.module+el8.10.0+2091+db4d14f6.src.rpm mecab-0:0.996-2.module+el8.10.0+1937+28fbbc83.src.rpm mecab-0:0.996-2.module+el8.10.0+1676+9b4b6e24.x86_64.rpm mecab-0:0.996-2.module+el8.10.0+1937+28fbbc83.x86_64.rpm mecab-0:0.996-2.module+el8.10.0+2091+db4d14f6.x86_64.rpm mecab-debuginfo-0:0.996-2.module+el8.10.0+2091+db4d14f6.x86_64.rpm mecab-debuginfo-0:0.996-2.module+el8.10.0+1937+28fbbc83.x86_64.rpm mecab-debugsource-0:0.996-2.module+el8.10.0+2091+db4d14f6.x86_64.rpm mecab-debugsource-0:0.996-2.module+el8.10.0+1937+28fbbc83.x86_64.rpm mecab-devel-0:0.996-2.module+el8.10.0+1937+28fbbc83.x86_64.rpm mecab-devel-0:0.996-2.module+el8.10.0+2091+db4d14f6.x86_64.rpm mecab-devel-0:0.996-2.module+el8.10.0+1676+9b4b6e24.x86_64.rpm mecab-ipadic-0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24.src.rpm mecab-ipadic-0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24.x86_64.rpm mecab-ipadic-EUCJP-0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24.x86_64.rpm