Skip to content
OpenAdvisories
Unscored USN-4651-1 0 CVEs

mysql-8.0 vulnerabilities

Published Nov 30, 2020 · Updated Apr 22, 2026

Summary

Tom Reynolds discovered that due to a packaging error, the MySQL X Plugin
was listening to all network interfaces by default, contrary to
expectations.

This update changes the default MySQL configuration to bind the MySQL X
Plugin to localhost only. This change may impact environments where the
MySQL X Plugin needs to be accessible from the network. The
mysqlx-bind-address setting in the /etc/mysql/mysql.conf.d/mysqld.cnf file
can be modified to allow network access.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS mysql-8.0 8.0.22-0ubuntu0.20.04.3

References

  • report
    https://launchpad.net/bugs/1857584