Home / mailings

PDF

[USN-9046-1] MySQL vulnerabilities

Posted on 11 November 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-9046-1
November 11, 2026

mysql-8.0, mysql-8.4, mysql-9.7 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.10
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in MySQL.

Software Description:
- mysql-9.7: MySQL database
- mysql-8.4: MySQL database
- mysql-8.0: MySQL database

Details:

Multiple security issues were discovered in MySQL.

MySQL has been updated to 8.4.13 in Ubuntu 26.04 LTS. Ubuntu 26.10 has been
updated to MySQL 9.7.4. Ubuntu 22.04 LTS and Ubuntu 24.04 LTS packages have
been updated with backported patches.

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-13.html
https://dev.mysql.com/doc/relnotes/mysql/9.7/en/news-9-7-4.html
https://www.oracle.com/security-alerts/cpuoct2026.html

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.10
mysql-server 9.7.4-0ubuntu0.26.10.1

Ubuntu 26.04 LTS
mysql-server 8.4.13-0ubuntu0.26.04.2

Ubuntu 24.04 LTS
mysql-server-8.0 8.0.46-0ubuntu0.24.04.5

Ubuntu 22.04 LTS
mysql-server-8.0 8.0.46-0ubuntu0.22.04.5

This update may use a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References:
https://ubuntu.com/security/notices/USN-9046-1
CVE-2026-101607, CVE-2026-101608, CVE-2026-101609, CVE-2026-101610,
CVE-2026-101611, CVE-2026-101612, CVE-2026-101613, CVE-2026-101614,
CVE-2026-101615, CVE-2026-101616, CVE-2026-101617, CVE-2026-101618,
CVE-2026-101619, CVE-2026-101620, CVE-2026-101621, CVE-2026-101622,
CVE-2026-101623, CVE-2026-101624, CVE-2026-101627, CVE-2026-101629,
CVE-2026-101637, CVE-2026-101679, CVE-2026-101721, CVE-2026-101722,
CVE-2026-101724, CVE-2026-101725, CVE-2026-101726, CVE-2026-101727,
CVE-2026-101728, CVE-2026-101729, CVE-2026-101730, CVE-2026-101731,
CVE-2026-101732, CVE-2026-101733, CVE-2026-101747, CVE-2026-101748,
CVE-2026-101750, CVE-2026-101751, CVE-2026-101752, CVE-2026-101753,
CVE-2026-101754, CVE-2026-101756, CVE-2026-101760, CVE-2026-101761,
CVE-2026-101762, CVE-2026-101766, CVE-2026-101770, CVE-2026-101771,
CVE-2026-101772, CVE-2026-101773, CVE-2026-101774, CVE-2026-101775,
CVE-2026-101776, CVE-2026-101777, CVE-2026-101778, CVE-2026-101779,
CVE-2026-101780, CVE-2026-101781, CVE-2026-101784, CVE-2026-101785,
CVE-2026-101787, CVE-2026-101788, CVE-2026-101789, CVE-2026-101794,
CVE-2026-101795, CVE-2026-101796, CVE-2026-101797, CVE-2026-101798,
CVE-2026-101799, CVE-2026-101800, CVE-2026-101801, CVE-2026-101802,
CVE-2026-101803

Package Information:
https://launchpad.net/ubuntu/+source/mysql-9.7/9.7.4-0ubuntu0.26.10.1
https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.13-0ubuntu0.26.04.2
https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.46-0ubuntu0.24.04.5
https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.46-0ubuntu0.22.04.5

--===============1724931292189838413==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP