Debian Bug report logs -
#972623
Security fixes from the October 2020 CPU
Reply or subscribe to this bug.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>:
Bug#972623; Package src:mysql-8.0.
(Wed, 21 Oct 2020 13:15:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Lars Tangvald <lars.tangvald@oracle.com>:
New Bug report received and forwarded. Copy sent to Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>.
(Wed, 21 Oct 2020 13:15:04 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Source: mysql-8.0
Version: 8.0.21
Severity: grave
Tags: security upstream fixed-upstream
The Oracle Critical Patch Update for October 2020 lists CVEs affecting
MySQL 8.0
that are fixed in 8.0.22
CVE list:
- CVE-2020-14672 CVE-2020-14765 CVE-2020-14769 CVE-2020-14771
- CVE-2020-14773 CVE-2020-14775 CVE-2020-14776 CVE-2020-14777
- CVE-2020-14785 CVE-2020-14786 CVE-2020-14789 CVE-2020-14790
- CVE-2020-14791 CVE-2020-14793 CVE-2020-14794 CVE-2020-14799
- CVE-2020-14800 CVE-2020-14804 CVE-2020-14809 CVE-2020-14812
- CVE-2020-14814 CVE-2020-14821 CVE-2020-14827 CVE-2020-14828
- CVE-2020-14829 CVE-2020-14830 CVE-2020-14836 CVE-2020-14837
- CVE-2020-14838 CVE-2020-14839 CVE-2020-14844 CVE-2020-14845
- CVE-2020-14846 CVE-2020-14848 CVE-2020-14852 CVE-2020-14860
- CVE-2020-14861 CVE-2020-14866 CVE-2020-14867 CVE-2020-14868
- CVE-2020-14869 CVE-2020-14870 CVE-2020-14873 CVE-2020-14878
- CVE-2020-14888 CVE-2020-14891 CVE-2020-14893
Ref: https://www.oracle.com/security-alerts/cpuoct2020.html#AppendixMSQL
Regards,
Lars Tangvald
No longer marked as found in versions mysql-8.0/8.0.21.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Sat, 24 Oct 2020 17:39:03 GMT) (full text, mbox, link).
Marked as found in versions mysql-8.0/8.0.21-1.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Sat, 24 Oct 2020 17:39:04 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Mon Nov 16 10:35:34 2020;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.
Vulmon