UbuntuUpdates.org

Package "mysql-router"

Name: mysql-router

Description:

route connections from MySQL clients to MySQL servers
Latest version: 8.0.23-0ubuntu0.20.10.1
Release: groovy (20.10)
Level: security
Repository: universe
Head package: mysql-8.0
Homepage: https://dev.mysql.com/doc/mysql-router/8.0/en/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "mysql-router"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "mysql-router" in Groovy

Repository Area Version
base universe 8.0.21-1
updates universe 8.0.23-0ubuntu0.20.10.1

Changelog

Version: 8.0.23-0ubuntu0.20.10.1 2021-02-01 15:06:26 UTC

  mysql-8.0 (8.0.23-0ubuntu0.20.10.1) groovy-security; urgency=medium

  * SECURITY UPDATE: Update to 8.0.23 to fix security issues
    - CVE-2021-2002, CVE-2021-2010, CVE-2021-2011, CVE-2021-2021,
      CVE-2021-2022, CVE-2021-2024, CVE-2021-2031, CVE-2021-2032,
      CVE-2021-2036, CVE-2021-2038, CVE-2021-2046, CVE-2021-2048,
      CVE-2021-2056, CVE-2021-2058, CVE-2021-2060, CVE-2021-2061,
      CVE-2021-2065, CVE-2021-2070, CVE-2021-2072, CVE-2021-2076,
      CVE-2021-2081, CVE-2021-2087, CVE-2021-2088, CVE-2021-2122
  * debian/patches/atomic-test-words.patch: updated.
  * debian/patches/fix_test_year.patch: fix test with hardcoded date.
  * debian/libmysqlclient21.symbols: added new symbol.
  * debian/mysql-router.install: remove mysql_protocol.so, it has been
    removed from the new version.
  * debian/*.install: added some new files shipped in the new version.

 -- Marc Deslauriers <email address hidden> Wed, 27 Jan 2021 09:25:29 -0500
Source diff to previous version
CVE-2021-2002 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.22 and prior
CVE-2021-2010 Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.50 and prior, 5.7.32 and p
CVE-2021-2011 Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 an
CVE-2021-2021 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior.
CVE-2021-2022 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.6.50 and prior, 5.7.32 and
CVE-2021-2024 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior.
CVE-2021-2031 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior.
CVE-2021-2032 Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.7.32 and prior
CVE-2021-2036 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior.
CVE-2021-2038 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.22 a
CVE-2021-2046 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.22 and
CVE-2021-2048 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.22 and prior. Difficult t
CVE-2021-2056 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.22 and prior. Diffic
CVE-2021-2058 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 8.0.22 and prior. Ea
CVE-2021-2060 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.50 and prior,
CVE-2021-2061 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.22 and prior. Diffic
CVE-2021-2065 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior.
CVE-2021-2070 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior.
CVE-2021-2072 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.22 and
CVE-2021-2076 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior.
CVE-2021-2081 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.22 and
CVE-2021-2087 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.22 and prior. Easily
CVE-2021-2088 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.22 and prior. Easily
CVE-2021-2122 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.22 and prior. Easily

Version: 8.0.22-0ubuntu0.20.10.2 2020-10-27 13:07:44 UTC

  mysql-8.0 (8.0.22-0ubuntu0.20.10.2) groovy-security; urgency=medium

  * SECURITY UPDATE: Update to 8.0.22 to fix security issues
    - CVE-2019-14775, CVE-2020-14672, CVE-2020-14765, CVE-2020-14769,
      CVE-2020-14771, CVE-2020-14773, CVE-2020-14775, CVE-2020-14776,
      CVE-2020-14777, CVE-2020-14785, CVE-2020-14786, CVE-2020-14789,
      CVE-2020-14790, CVE-2020-14791, CVE-2020-14793, CVE-2020-14794,
      CVE-2020-14800, CVE-2020-14804, CVE-2020-14809, CVE-2020-14812,
      CVE-2020-14814, CVE-2020-14821, CVE-2020-14827, CVE-2020-14828,
      CVE-2020-14829, CVE-2020-14830, CVE-2020-14836, CVE-2020-14837,
      CVE-2020-14838, CVE-2020-14839, CVE-2020-14844, CVE-2020-14845,
      CVE-2020-14846, CVE-2020-14848, CVE-2020-14852, CVE-2020-14853,
      CVE-2020-14860, CVE-2020-14861, CVE-2020-14866, CVE-2020-14867,
      CVE-2020-14868, CVE-2020-14869, CVE-2020-14870, CVE-2020-14873,
      CVE-2020-14878, CVE-2020-14888, CVE-2020-14891, CVE-2020-14893
  * Removed patches included in new version:
    - debian/patches/fix_mariadb_charset_segfault.patch
    - debian/patches/fix_expired_test_certs.patch
  * debian/mysql-router.install: adjust path to sample_mysqlrouter.conf.
  * debian/mysql-router.install, debian/not-installed: added new files.
  * debian/libmysqlclient21.symbols: added new symbol.

 -- Marc Deslauriers <email address hidden> Thu, 22 Oct 2020 09:04:29 -0400
CVE-2019-14775 RESERVED
CVE-2020-14672 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.6.49 and
CVE-2020-14765 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior, 5.7.31
CVE-2020-14769 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.49 and prior,
CVE-2020-14771 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 5.7.31 a
CVE-2020-14773 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14775 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 a
CVE-2020-14776 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 a
CVE-2020-14777 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14785 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14786 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.21 and prior. Easily
CVE-2020-14789 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.31 and prior and 8.0
CVE-2020-14790 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.31 and prior and 8.0.
CVE-2020-14791 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Difficult t
CVE-2020-14793 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.49 and prior,
CVE-2020-14794 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14800 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.21
CVE-2020-14804 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.21 and prior. Easily
CVE-2020-14809 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14812 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 5.6.49 and prior, 5.
CVE-2020-14814 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.21 and prior. Easily
CVE-2020-14821 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Easily expl
CVE-2020-14827 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 5.7.31 a
CVE-2020-14828 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.21 and prior. Easily
CVE-2020-14829 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Easily expl
CVE-2020-14830 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14836 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14837 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14838 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.21
CVE-2020-14839 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14844 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.21 and prior. Easily
CVE-2020-14845 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14846 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14848 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Easily expl
CVE-2020-14852 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets). Supported versions that are affected are 8.0.21 and prior. E
CVE-2020-14853 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDBCluster Plugin). Supported versions that are affected are 8.0.21 a
CVE-2020-14860 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.21 and p
CVE-2020-14861 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14866 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14867 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 5.6.49 and prior, 5.7.31
CVE-2020-14868 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14869 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 5.7.31 a
CVE-2020-14870 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are 8.0.21 and prior. E
CVE-2020-14873 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affected are 8.0.21 and prior. Di
CVE-2020-14878 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 8.0.21 a
CVE-2020-14888 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14891 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.
CVE-2020-14893 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior.


About   -   Send Feedback to @ubuntu_updates