Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
mysql 8.0: Multiple Security Risks Fixed
RLSA-2023:3087
Summary
This update fixes multiple security risks in MySQL 8.0, including vulnerabilities that could allow unauthorized access to sensitive data or disrupt database operations. It's essential to install this update to protect your database and prevent potential security breaches. Apply this update as soon as possible to ensure your system is secure.
What to do
- Update mecab to version 0:0.996-2.module+el8.10.0+1676+9b4b6e24.
- Update mecab to version 0:0.996-2.module+el8.10.0+2091+db4d14f6.
- Update mecab to version 0:0.996-2.module+el8.10.0+1937+28fbbc83.
- Update mecab-ipadic to version 0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Rocky Linux:8 | – | mecab |
< 0:0.996-2.module+el8.10.0+1676+9b4b6e24 < 0:0.996-2.module+el8.10.0+2091+db4d14f6 < 0:0.996-2.module+el8.10.0+1937+28fbbc83 Fix: upgrade to 0:0.996-2.module+el8.10.0+1676+9b4b6e24
|
| Rocky Linux:8 | – | mecab-ipadic |
< 0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24 Fix: upgrade to 0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24
|
Original title
Important: mysql:8.0 security, bug fix, and enhancement update
Original description
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.
The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177734, BZ#2177735, BZ#2177736)
Security Fix(es):
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)
* mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)
* mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)
* mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)
* mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)
* mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Rocky Linux8 AppStream and Devel channels missing mecab-devel rpm (BZ#2180411)
The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177734, BZ#2177735, BZ#2177736)
Security Fix(es):
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)
* mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)
* mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)
* mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)
* mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)
* mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Rocky Linux8 AppStream and Devel channels missing mecab-devel rpm (BZ#2180411)
osv CVSS3.1
7.5
- https://errata.rockylinux.org/RLSA-2023:3087 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142861 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142863 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142865 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142868 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142869 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142870 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142871 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142872 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142873 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142875 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142877 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142879 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142880 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2142881 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162268 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162270 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162271 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162272 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162274 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162275 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162276 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162277 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162278 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162280 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162281 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162282 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162283 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162284 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162285 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162286 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162287 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162288 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162289 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162290 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2162291 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2188110 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2188111 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2188112 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2188126 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2245011 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2245012 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2245013 Third Party Advisory
Published: 28 Jun 2026 · Updated: 28 Jun 2026 · First seen: 28 Jun 2026