Skip to content
OpenAdvisories
High ALSA-2023:3087 42 CVEs

Important: mysql:8.0 security, bug fix, and enhancement update

Published May 16, 2023 · Updated Nov 5, 2026

Ecosystem: AlmaLinux

Summary

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

The following packages have been upgraded to a later upstream version: mysql (8.0.32). (BZ#2177734, BZ#2177735, BZ#2177736)

Security Fix(es):

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2023) (CVE-2023-21912)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21594)
* mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2022) (CVE-2022-21599)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21604)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21608)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21611)
* mysql: Server: Connection Handling unspecified vulnerability (CPU Oct 2022) (CVE-2022-21617)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21625)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022) (CVE-2022-21632)
* mysql: Server: Replication unspecified vulnerability (CPU Oct 2022) (CVE-2022-21633)
* mysql: InnoDB unspecified vulnerability (CPU Oct 2022) (CVE-2022-21637)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-21640)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39400)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39408)
* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022) (CVE-2022-39410)
* mysql: Server: DML unspecified vulnerability (CPU Jan 2023) (CVE-2023-21836)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21863)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21864)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21865)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21867)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21868)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21869)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21870)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21871)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21873)
* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2023) (CVE-2023-21875)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21876)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21877)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21878)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21879)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2023) (CVE-2023-21880)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21881)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21883)
* mysql: Server: GIS unspecified vulnerability (CPU Jan 2023) (CVE-2023-21887)
* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21917)
* mysql: Server: Thread Pooling unspecified vulnerability (CPU Jan 2023) (CVE-2023-21874)
* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) (CVE-2023-21882)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux8 AppStream and Devel channels missing mecab-devel rpm (BZ#2180411)

Fixed packages 11

ReleasePackageFixed in
AlmaLinux · 8 mecab 0.996-2.module_el8.6.0+3340+d764b636
AlmaLinux · 8 mecab-devel 0.996-2.module_el8.6.0+3340+d764b636
AlmaLinux · 8 mecab-ipadic 2.7.0.20070801-16.module_el8.6.0+3340+d764b636
AlmaLinux · 8 mecab-ipadic-EUCJP 2.7.0.20070801-16.module_el8.6.0+3340+d764b636
AlmaLinux · 8 mysql 8.0.32-1.module_el8.8.0+3567+56a616e4
AlmaLinux · 8 mysql-common 8.0.32-1.module_el8.8.0+3567+56a616e4
AlmaLinux · 8 mysql-devel 8.0.32-1.module_el8.8.0+3567+56a616e4
AlmaLinux · 8 mysql-errmsg 8.0.32-1.module_el8.8.0+3567+56a616e4
AlmaLinux · 8 mysql-libs 8.0.32-1.module_el8.8.0+3567+56a616e4
AlmaLinux · 8 mysql-server 8.0.32-1.module_el8.8.0+3567+56a616e4
AlmaLinux · 8 mysql-test 8.0.32-1.module_el8.8.0+3567+56a616e4

Vulnerabilities 42

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-21594
  • report
    https://access.redhat.com/security/cve/CVE-2022-21599
  • report
    https://access.redhat.com/security/cve/CVE-2022-21604
  • report
    https://access.redhat.com/security/cve/CVE-2022-21608
  • report
    https://access.redhat.com/security/cve/CVE-2022-21611
  • report
    https://access.redhat.com/security/cve/CVE-2022-21617
  • report
    https://access.redhat.com/security/cve/CVE-2022-21625
  • report
    https://access.redhat.com/security/cve/CVE-2022-21632
  • report
    https://access.redhat.com/security/cve/CVE-2022-21633
  • report
    https://access.redhat.com/security/cve/CVE-2022-21637
  • report
    https://access.redhat.com/security/cve/CVE-2022-21640
  • report
    https://access.redhat.com/security/cve/CVE-2022-39400
  • report
    https://access.redhat.com/security/cve/CVE-2022-39408
  • report
    https://access.redhat.com/security/cve/CVE-2022-39410
  • report
    https://access.redhat.com/security/cve/CVE-2023-21836
  • report
    https://access.redhat.com/security/cve/CVE-2023-21863
  • report
    https://access.redhat.com/security/cve/CVE-2023-21864
  • report
    https://access.redhat.com/security/cve/CVE-2023-21865
  • report
    https://access.redhat.com/security/cve/CVE-2023-21867
  • report
    https://access.redhat.com/security/cve/CVE-2023-21868
  • report
    https://access.redhat.com/security/cve/CVE-2023-21869
  • report
    https://access.redhat.com/security/cve/CVE-2023-21870
  • report
    https://access.redhat.com/security/cve/CVE-2023-21871
  • report
    https://access.redhat.com/security/cve/CVE-2023-21873
  • report
    https://access.redhat.com/security/cve/CVE-2023-21874
  • report
    https://access.redhat.com/security/cve/CVE-2023-21875
  • report
    https://access.redhat.com/security/cve/CVE-2023-21876
  • report
    https://access.redhat.com/security/cve/CVE-2023-21877
  • report
    https://access.redhat.com/security/cve/CVE-2023-21878
  • report
    https://access.redhat.com/security/cve/CVE-2023-21879
  • report
    https://access.redhat.com/security/cve/CVE-2023-21880
  • report
    https://access.redhat.com/security/cve/CVE-2023-21881
  • report
    https://access.redhat.com/security/cve/CVE-2023-21882
  • report
    https://access.redhat.com/security/cve/CVE-2023-21883
  • report
    https://access.redhat.com/security/cve/CVE-2023-21887
  • report
    https://access.redhat.com/security/cve/CVE-2023-21912
  • report
    https://access.redhat.com/security/cve/CVE-2023-21917
  • report
    https://bugzilla.redhat.com/2142861
  • report
    https://bugzilla.redhat.com/2142863