The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4195-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to     fix these issues.

    MySQL has been updated to 8.0.18 in Ubuntu 19.10. Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 19.04     have been updated to MySQL 5.7.28.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-28.html     https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html https://www.oracle.com/security-     alerts/cpuoct2019.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

**MySQL 8.0.18**

Release notes :

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-18.html

CVEs fixed :

CVE-2019-2911 CVE-2019-2914 CVE-2019-2938 CVE-2019-2946 CVE-2019-2957 CVE-2019-2960 CVE-2019-2963 CVE-2019-2966 CVE-2019-2967 CVE-2019-2968 CVE-2019-2974 CVE-2019-2982 CVE-2019-2991 CVE-2019-2993 CVE-2019-2997 CVE-2019-2998 CVE-2019-3004 CVE-2019-3009 CVE-2019-3011 CVE-2019-3018 https://bugzilla.redhat.com/show_bug.cgi?id=1768175 https://www.oracle.com/security-alerts/cpuoct2019.html

Maintainer notes :

linking with GOLD disabled on armv7hl, because of https://bugs.mysql.com/bug.php?id=96698

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3732 advisory.

    mysql     [8.0.21-1]
    - Rebase to 8.0.21
    - Use bundled libzstd and libevent for RHSCL and RHEL-8.0.0
    - Check that we have correct versions in bundled(*) Provides
    - Remove re2 bundled dependency

    [8.0.20-1]
    - Rebase to 8.0.20

    [8.0.19-2]
    - Specify all perl dependencies

    [8.0.19-1]
    - Rebase to 8.0.19

    [8.0.18-1]
    - Rebase to 8.0.18
    - Add libzstd-devel dependencies
    - Include patch to build against protobuf 3.11

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
131161	Ubuntu 16.04 LTS / 18.04 LTS : MySQL vulnerabilities (USN-4195-1)	Nessus	Ubuntu Local Security Checks	2019/11/20	2024/8/27	medium
130783	Fedora 30 : community-mysql (2019-48a0a07033)	Nessus	Fedora Local Security Checks	2019/11/12	2019/12/12	medium
235953	Alibaba Cloud Linux 3 : 0097: mysql:8.0 (ALINUX3-SA-2021:0097)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/15	high
140614	Oracle Linux 8 : mysql:8.0 (ELSA-2020-3732)	Nessus	Oracle Linux Local Security Checks	2020/9/17	2024/7/9	high

偵測

搜尋 Plugin

medium

medium

high

high