1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-4651-1

[USN-4651-1] MySQL vulnerabilities

Severity None
Affected Packages 12
Info Packages

MySQL could allow unintended access to network services.

Tom Reynolds discovered that due to a packaging error, the MySQL X Plugin
was listening to all network interfaces by default, contrary to
expectations.

This update changes the default MySQL configuration to bind the MySQL X
Plugin to localhost only. This change may impact environments where the
MySQL X Plugin needs to be accessible from the network. The
mysqlx-bind-address setting in the /etc/mysql/mysql.conf.d/mysqld.cnf file
can be modified to allow network access.

Package Affected Version
pkg:deb/ubuntu/mysql-testsuite?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/mysql-testsuite-8.0?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/mysql-source-8.0?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/mysql-server?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/mysql-server-core-8.0?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/mysql-server-8.0?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/mysql-router?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/mysql-client?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/mysql-client-core-8.0?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/mysql-client-8.0?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/libmysqlclient21?distro=focal < 8.0.22-0ubuntu0.20.04.3
pkg:deb/ubuntu/libmysqlclient-dev?distro=focal < 8.0.22-0ubuntu0.20.04.3
ID
USN-4651-1
Severity
none
URL
https://ubuntu.com/security/notices/USN-4651-1
Published
2020-11-30T12:40:14
(3 years ago)
Modified
2020-11-30T12:40:14
(3 years ago)
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/mysql-testsuite?distro=focal ubuntu mysql-testsuite < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/mysql-testsuite-8.0?distro=focal ubuntu mysql-testsuite-8.0 < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/mysql-source-8.0?distro=focal ubuntu mysql-source-8.0 < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/mysql-server?distro=focal ubuntu mysql-server < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/mysql-server-core-8.0?distro=focal ubuntu mysql-server-core-8.0 < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/mysql-server-8.0?distro=focal ubuntu mysql-server-8.0 < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/mysql-router?distro=focal ubuntu mysql-router < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/mysql-client?distro=focal ubuntu mysql-client < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/mysql-client-core-8.0?distro=focal ubuntu mysql-client-core-8.0 < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/mysql-client-8.0?distro=focal ubuntu mysql-client-8.0 < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/libmysqlclient21?distro=focal ubuntu libmysqlclient21 < 8.0.22-0ubuntu0.20.04.3 focal
Affected pkg:deb/ubuntu/libmysqlclient-dev?distro=focal ubuntu libmysqlclient-dev < 8.0.22-0ubuntu0.20.04.3 focal