Skip to content
OpenAdvisories
High ALSA-2020:3732 109 CVEs

Important: mysql:8.0 security update

Published Sep 14, 2020 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.21).

Security Fix(es):

* mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2020-14663, CVE-2020-14678, CVE-2020-14697, CVE-2020-2761, CVE-2020-2774, CVE-2020-2779, CVE-2020-2853, CVE-2020-14586, CVE-2020-14702)

* mysql: Server: Security: Encryption multiple unspecified vulnerabilities (CVE-2019-2914, CVE-2019-2957)

* mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2938, CVE-2019-2963, CVE-2019-2968, CVE-2019-3018, CVE-2020-2577, CVE-2020-2589, CVE-2020-2760, CVE-2020-2762, CVE-2020-2814, CVE-2020-2893, CVE-2020-2895, CVE-2020-14568, CVE-2020-14623, CVE-2020-14633, CVE-2020-14634)

* mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2946, CVE-2020-2925)

* mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2960, CVE-2020-2759, CVE-2020-2763, CVE-2020-14567)

* mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2966, CVE-2019-2967, CVE-2019-2974, CVE-2019-2982, CVE-2019-2991, CVE-2019-2998, CVE-2020-2579, CVE-2020-2660, CVE-2020-2679, CVE-2020-2686, CVE-2020-2765, CVE-2020-2892, CVE-2020-2897, CVE-2020-2901, CVE-2020-2904, CVE-2020-2923, CVE-2020-2924, CVE-2020-2928, CVE-2020-14539, CVE-2020-14547, CVE-2020-14597, CVE-2020-14614, CVE-2020-14654, CVE-2020-14680, CVE-2020-14725)

* mysql: Server: C API multiple unspecified vulnerabilities (CVE-2019-2993, CVE-2019-3011)

* mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2997, CVE-2020-2580)

* mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-3004, CVE-2020-2627, CVE-2020-2930, CVE-2020-14619)

* mysql: Server: Connection unspecified vulnerability (CVE-2019-3009)

* mysql: Server: Options multiple unspecified vulnerabilities (CVE-2020-2584, CVE-2020-14632)

* mysql: Server: DML multiple unspecified vulnerabilities (CVE-2020-2588, CVE-2020-2780, CVE-2020-14540, CVE-2020-14575, CVE-2020-14620)

* mysql: C API multiple unspecified vulnerabilities (CVE-2020-2752, CVE-2020-2922, CVE-2020-14550, CVE-2020-2570, CVE-2020-2573, CVE-2020-2574)

* mysql: Server: Logging unspecified vulnerability (CVE-2020-2770)

* mysql: Server: Memcached unspecified vulnerability (CVE-2020-2804)

* mysql: Server: Stored Procedure unspecified vulnerability (CVE-2020-2812)

* mysql: Server: Information Schema multiple unspecified vulnerabilities (CVE-2020-2896, CVE-2020-14559, CVE-2020-2694)

* mysql: Server: Charsets unspecified vulnerability (CVE-2020-2898)

* mysql: Server: Connection Handling unspecified vulnerability (CVE-2020-2903)

* mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2020-2921)

* mysql: Server: Group Replication GCS unspecified vulnerability (CVE-2020-2926)

* mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2020-14553)

* mysql: Server: UDF unspecified vulnerability (CVE-2020-14576)

* mysql: Server: JSON unspecified vulnerability (CVE-2020-14624)

* mysql: Server: Security: Audit unspecified vulnerability (CVE-2020-14631)

* mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2020-14641, CVE-2020-14643, CVE-2020-14651)

* mysql: Server: Locking unspecified vulnerability (CVE-2020-14656)

* mysql: Information Schema unspecified vulnerability (CVE-2019-2911)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 6

ReleasePackageFixed in
AlmaLinux · 8 mecab 0.996-1.module_el8.4.0+2532+b8928c02.9
AlmaLinux · 8 mecab 0.996-1.module_el8.5.0+33+8bc5f36a.9
AlmaLinux · 8 mecab-ipadic 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
AlmaLinux · 8 mecab-ipadic 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02
AlmaLinux · 8 mecab-ipadic-EUCJP 2.7.0.20070801-16.module_el8.5.0+33+8bc5f36a
AlmaLinux · 8 mecab-ipadic-EUCJP 2.7.0.20070801-16.module_el8.4.0+2532+b8928c02

Vulnerabilities 109

References

  • report
    https://vulners.com/cve/CVE-2019-2911
  • report
    https://vulners.com/cve/CVE-2019-2914
  • report
    https://vulners.com/cve/CVE-2019-2938
  • report
    https://vulners.com/cve/CVE-2019-2946
  • report
    https://vulners.com/cve/CVE-2019-2957
  • report
    https://vulners.com/cve/CVE-2019-2960
  • report
    https://vulners.com/cve/CVE-2019-2963
  • report
    https://vulners.com/cve/CVE-2019-2966
  • report
    https://vulners.com/cve/CVE-2019-2967
  • report
    https://vulners.com/cve/CVE-2019-2968
  • report
    https://vulners.com/cve/CVE-2019-2974
  • report
    https://vulners.com/cve/CVE-2019-2982
  • report
    https://vulners.com/cve/CVE-2019-2991
  • report
    https://vulners.com/cve/CVE-2019-2993
  • report
    https://vulners.com/cve/CVE-2019-2997
  • report
    https://vulners.com/cve/CVE-2019-2998
  • report
    https://vulners.com/cve/CVE-2019-3004
  • report
    https://vulners.com/cve/CVE-2019-3009
  • report
    https://vulners.com/cve/CVE-2019-3011
  • report
    https://vulners.com/cve/CVE-2019-3018
  • report
    https://vulners.com/cve/CVE-2020-14539
  • report
    https://vulners.com/cve/CVE-2020-14540
  • report
    https://vulners.com/cve/CVE-2020-14547
  • report
    https://vulners.com/cve/CVE-2020-14550
  • report
    https://vulners.com/cve/CVE-2020-14553
  • report
    https://vulners.com/cve/CVE-2020-14559
  • report
    https://vulners.com/cve/CVE-2020-14567
  • report
    https://vulners.com/cve/CVE-2020-14568
  • report
    https://vulners.com/cve/CVE-2020-14575
  • report
    https://vulners.com/cve/CVE-2020-14576
  • report
    https://vulners.com/cve/CVE-2020-14586
  • report
    https://vulners.com/cve/CVE-2020-14597
  • report
    https://vulners.com/cve/CVE-2020-14614
  • report
    https://vulners.com/cve/CVE-2020-14619
  • report
    https://vulners.com/cve/CVE-2020-14620
  • report
    https://vulners.com/cve/CVE-2020-14623
  • report
    https://vulners.com/cve/CVE-2020-14624
  • report
    https://vulners.com/cve/CVE-2020-14631
  • report
    https://vulners.com/cve/CVE-2020-14632