Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2022:7119
HistoryOct 25, 2022 - 12:00 a.m.

Moderate: mysql:8.0 security, bug fix, and enhancement update

2022-10-2500:00:00
errata.almalinux.org
14
mysql server
sql database
vulnerabilities
bug fix
upstream version
security
enhancements

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

0.003 Low

EPSS

Percentile

69.6%

JSON

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.30).

Security Fix(es):

  • mysql: Server: DML multiple unspecified vulnerabilities (CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413)
  • mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2021-2481, CVE-2021-35575, CVE-2021-35577, CVE-2021-35610, CVE-2021-35612, CVE-2021-35626, CVE-2021-35627, CVE-2021-35628, CVE-2021-35634, CVE-2021-35635, CVE-2021-35636, CVE-2021-35638, CVE-2021-35641, CVE-2021-35642, CVE-2021-35643, CVE-2021-35644, CVE-2021-35645, CVE-2021-35646, CVE-2021-35647, CVE-2022-21253, CVE-2022-21254, CVE-2022-21264, CVE-2022-21278, CVE-2022-21297, CVE-2022-21339, CVE-2022-21342, CVE-2022-21351, CVE-2022-21370, CVE-2022-21378, CVE-2022-21412, CVE-2022-21414, CVE-2022-21435, CVE-2022-21436, CVE-2022-21437, CVE-2022-21438, CVE-2022-21440, CVE-2022-21452, CVE-2022-21459, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479, CVE-2022-21509, CVE-2022-21525, CVE-2022-21526, CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531, CVE-2022-21553, CVE-2022-21569, CVE-2022-21265)
  • mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2021-35546, CVE-2022-21344, CVE-2022-21415)
  • mysql: Server: Error Handling unspecified vulnerability (CVE-2021-35596)
  • mysql: C API unspecified vulnerability (CVE-2021-35597)
  • mysql: Server: Options multiple unspecified vulnerabilities (CVE-2021-35602, CVE-2021-35630, CVE-2022-21515)
  • mysql: InnoDB multiple unspecified vulnerabilities (CVE-2021-35604, CVE-2022-21302, CVE-2022-21348, CVE-2022-21352, CVE-2022-21417, CVE-2022-21418, CVE-2022-21451, CVE-2022-21517, CVE-2022-21537, CVE-2022-21539, CVE-2022-21423)
  • mysql: Server: Group Replication Plugin multiple unspecified vulnerabilities (CVE-2021-35608, CVE-2022-21256, CVE-2022-21379, CVE-2022-21454)
  • mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2021-35622, CVE-2022-21358, CVE-2022-21372, CVE-2022-21538)
  • mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2021-35624, CVE-2022-21245, CVE-2021-35625)
  • mysql: Server: GIS unspecified vulnerability (CVE-2021-35631)
  • mysql: Server: Data Dictionary unspecified vulnerability (CVE-2021-35632)
  • mysql: Server: PS unspecified vulnerability (CVE-2021-35637)
  • mysql: Server: Stored Procedure multiple unspecified vulnerabilities (CVE-2021-35639, CVE-2022-21303, CVE-2022-21522, CVE-2022-21534)
  • mysql: Server: FTS multiple unspecified vulnerabilities (CVE-2021-35648, CVE-2022-21427)
  • mysql: Server: Federated multiple unspecified vulnerabilities (CVE-2022-21270, CVE-2022-21547)
  • mysql: Server: Parser unspecified vulnerability (CVE-2022-21304)
  • mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2022-21362, CVE-2022-21374)
  • mysql: Server: Compiling unspecified vulnerability (CVE-2022-21367)
  • mysql: Server: Components Services unspecified vulnerability (CVE-2022-21368)
  • mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2022-21425, CVE-2022-21444, CVE-2021-35640, CVE-2022-21249)
  • mysql: Server: PAM Auth Plugin unspecified vulnerability (CVE-2022-21457)
  • mysql: Server: Logging multiple unspecified vulnerabilities (CVE-2022-21460, CVE-2021-35633)
  • mysql: Server: Security: Roles unspecified vulnerability (CVE-2021-35623)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Rebuild mecab due to change in the suffix (from .el8 to .el8.0.0) [almalinux-8] (BZ#2110940)
OSVersionArchitecturePackageVersionFilename
almalinux8aarch64mysql-server< 8.0.30-1.module_el8.6.0+3340+d764b636mysql-server-8.0.30-1.module_el8.6.0+3340+d764b636.aarch64.rpm
almalinux8aarch64mysql-devel< 8.0.30-1.module_el8.6.0+3340+d764b636mysql-devel-8.0.30-1.module_el8.6.0+3340+d764b636.aarch64.rpm
almalinux8aarch64mysql< 8.0.30-1.module_el8.6.0+3340+d764b636mysql-8.0.30-1.module_el8.6.0+3340+d764b636.aarch64.rpm
almalinux8aarch64mysql-test< 8.0.30-1.module_el8.6.0+3340+d764b636mysql-test-8.0.30-1.module_el8.6.0+3340+d764b636.aarch64.rpm
almalinux8aarch64mysql-common< 8.0.30-1.module_el8.6.0+3340+d764b636mysql-common-8.0.30-1.module_el8.6.0+3340+d764b636.aarch64.rpm
almalinux8aarch64mecab-ipadic-eucjp< 2.7.0.20070801-16.module_el8.6.0+3340+d764b636mecab-ipadic-EUCJP-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.aarch64.rpm
almalinux8aarch64mysql-libs< 8.0.30-1.module_el8.6.0+3340+d764b636mysql-libs-8.0.30-1.module_el8.6.0+3340+d764b636.aarch64.rpm
almalinux8aarch64mecab< 0.996-2.module_el8.6.0+3340+d764b636mecab-0.996-2.module_el8.6.0+3340+d764b636.aarch64.rpm
almalinux8aarch64mysql-errmsg< 8.0.30-1.module_el8.6.0+3340+d764b636mysql-errmsg-8.0.30-1.module_el8.6.0+3340+d764b636.aarch64.rpm
almalinux8aarch64mecab-ipadic< 2.7.0.20070801-16.module_el8.6.0+3340+d764b636mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.aarch64.rpm
Rows per page:
1-10 of 401

References

Related

nessus 26
osv 21
oraclelinux 2
rocky 2
openvas 28
redhat 3
cloudfoundry 3
ubuntu 7
altlinux 1
almalinux 1
fedora 7
photon 13
freebsd 4
ibm 3
f5 5
cbl_mariner 12
veracode 5
cve 6
prion 8
debiancve 6
ubuntucve 8
nvd 4
cnvd 7
cvelist 8
redhatcve 9
nessus
nessus
AlmaLinux 8 : mysql:8.0 (ALSA-2022:7119)
2022-10-25 00:00:00
Oracle Linux 8 : mysql:8.0 (ELSA-2022-7119)
2022-10-27 00:00:00
Rocky Linux 8 : mysql:8.0 (RLSA-2022:7119)
2023-11-07 00:00:00
osv
osv
Moderate: mysql:8.0 security, bug fix, and enhancement update
2022-10-25 00:00:00
Moderate: mysql:8.0 security, bug fix, and enhancement update
2022-10-25 07:30:28
Moderate: mysql security, bug fix, and enhancement update
2022-09-20 00:00:00
oraclelinux
oraclelinux
mysql:8.0 security, bug fix, and enhancement update
2022-10-27 00:00:00
mysql security, bug fix, and enhancement update
2022-09-22 00:00:00
rocky
rocky
mysql:8.0 security, bug fix, and enhancement update
2022-10-25 07:30:28
mysql security, bug fix, and enhancement update
2022-09-20 11:37:11
openvas
openvas
Oracle MySQL Server 8.0 <= 8.0.26 Security Update (cpuoct2021) - Windows
2021-10-22 00:00:00
Oracle MySQL Server 8.0 <= 8.0.26 Security Update (cpuoct2021) - Linux
2021-10-22 00:00:00
Ubuntu: Security Advisory (USN-5123-1)
2021-10-26 00:00:00
redhat
redhat
(RHSA-2022:7119) Moderate: mysql:8.0 security, bug fix, and enhancement update
2022-10-25 07:30:28
(RHSA-2022:6518) Moderate: rh-mysql80-mysql security, bug fix, and enhancement update
2022-09-14 12:59:54
(RHSA-2022:6590) Moderate: mysql security, bug fix, and enhancement update
2022-09-20 11:37:11
cloudfoundry
cloudfoundry
USN-5400-1: MySQL vulnerabilities | Cloud Foundry
2022-05-26 00:00:00
USN-5270-1: MySQL vulnerabilities | Cloud Foundry
2022-03-10 00:00:00
USN-5537-1: MySQL vulnerabilities | Cloud Foundry
2022-08-26 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2021-10-25 00:00:00
MySQL vulnerabilities
2022-02-03 00:00:00
MySQL vulnerabilities
2022-07-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package MySQL version 8.0.29-alt1
2022-07-05 00:00:00
almalinux
almalinux
Moderate: mysql security, bug fix, and enhancement update
2022-09-20 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: community-mysql-8.0.27-1.fc33
2021-11-10 02:33:23
[SECURITY] Fedora 35 Update: community-mysql-8.0.27-1.fc35
2021-11-10 02:55:22
[SECURITY] Fedora 35 Update: community-mysql-8.0.28-1.fc35
2022-04-13 15:45:18
photon
photon
Important Photon OS Security Update - PHSA-2021-3.0-0327
2021-11-10 00:00:00
Important Photon OS Security Update - PHSA-2021-0119
2021-10-27 00:00:00
Important Photon OS Security Update - PHSA-2021-4.0-0119
2021-10-27 00:00:00
freebsd
freebsd
MySQL -- Multiple vulnerabilities
2022-01-18 00:00:00
MySQL -- Multiple vulnerabilities
2021-10-16 00:00:00
MySQL -- Multiple vulnerabilities
2022-04-16 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2022-11-08 16:20:11
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2022-05-12 14:14:41
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities in Oracle® MySQL
2023-01-25 21:00:47
f5
f5
K63314101 : Multiple MySQL vulnerabilities
2022-05-11 00:00:00
K51585448 : Multiple MySQL vulnerabilities CVE-2022-21527, CVE-2022-21528, CVE-2022-21529, CVE-2022-21530, CVE-2022-21531
2022-09-06 00:00:00
K15094237 : MySQL vulnerabilities CVE-2022-21460, CVE-2022-21462, CVE-2022-21478, CVE-2022-21479, CVE-2022-21482
2022-05-11 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-35626 affecting package mysql 8.0.26-2
2021-11-06 06:45:31
CVE-2021-35610 affecting package mysql for versions less than 8.0.28-1
2022-04-09 06:53:03
CVE-2021-35625 affecting package mysql for versions less than 8.0.28-1
2022-04-09 06:53:03
veracode
veracode
Denial Of Service (DoS)
2022-11-10 00:30:07
Denial Of Service (DoS)
2022-11-10 00:25:19
Privilege Escalation
2022-11-10 00:26:26
cve
cve
CVE-2022-21297
2022-01-19 12:15:12
CVE-2021-35623
2021-10-20 11:17:13
CVE-2021-35648
2021-10-20 11:17:18
prion
prion
Code injection
2021-10-20 11:17:00
Code injection
2021-10-20 11:17:00
Code injection
2021-10-20 11:17:00
debiancve
debiancve
CVE-2021-35646
2021-10-20 11:17:18
CVE-2021-35596
2021-10-20 11:17:03
CVE-2021-35546
2021-10-20 11:16:31
ubuntucve
ubuntucve
CVE-2021-35612
2021-10-20 00:00:00
CVE-2021-35647
2021-10-20 00:00:00
CVE-2022-21517
2022-07-19 00:00:00
nvd
nvd
CVE-2021-35577
2021-10-20 11:16:54
CVE-2021-35602
2021-10-20 11:17:05
CVE-2021-35624
2021-10-20 11:17:13
cnvd
cnvd
Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-80251)
2021-10-20 00:00:00
Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-80260)
2021-10-20 00:00:00
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2021-81774)
2021-10-20 00:00:00
cvelist
cvelist
CVE-2021-35575
2021-10-20 10:50:21
CVE-2021-35608
2021-10-20 10:50:47
CVE-2021-35607
2021-10-20 10:50:46
redhatcve
redhatcve
CVE-2022-21415
2022-05-06 17:24:33
CVE-2021-35546
2021-10-20 18:44:02
CVE-2021-35608
2021-10-20 18:44:46

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

0.003 Low

EPSS

Percentile

69.6%

JSON
Related for ALSA-2022:7119
nessus26osv21oraclelinux2rocky2openvas28redhat3cloudfoundry3ubuntu7altlinux1almalinux1fedora7photon13freebsd4ibm3f55cbl_mariner12veracode5cve6prion8debiancve6ubuntucve8nvd4cnvd7cvelist8redhatcve9