USN-8363-2
- Source
- https://ubuntu.com/security/notices/USN-8363-2
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8363-2.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-8363-2
- Upstream
- Related
- Published
- 2026-06-03T07:43:47Z
- Modified
- 2026-06-03T18:03:09.917955216Z
- Summary
- mysql-8.0 vulnerabilities
- Details
-
USN-8363-1 fixed several vulnerabilities in MySQL. This update provides the corresponding fixes for MySQL on Ubuntu 20.04 LTS.
Original advisory details:
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.
MySQL has been updated to 8.0.46 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.10 and Ubuntu 26.04 LTS have been updated to MySQL 8.4.9.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information:
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-46.html https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-9.html https://www.oracle.com/security-alerts/cpuapr2026.html
- References
-
- https://ubuntu.com/security/notices/USN-8363-2
- https://ubuntu.com/security/CVE-2026-21998
- https://ubuntu.com/security/CVE-2026-22001
- https://ubuntu.com/security/CVE-2026-22002
- https://ubuntu.com/security/CVE-2026-22004
- https://ubuntu.com/security/CVE-2026-22005
- https://ubuntu.com/security/CVE-2026-22009
- https://ubuntu.com/security/CVE-2026-22015
- https://ubuntu.com/security/CVE-2026-22017
- https://ubuntu.com/security/CVE-2026-34267
- https://ubuntu.com/security/CVE-2026-34270
- https://ubuntu.com/security/CVE-2026-34271
- https://ubuntu.com/security/CVE-2026-34276
- https://ubuntu.com/security/CVE-2026-34278
- https://ubuntu.com/security/CVE-2026-34293
- https://ubuntu.com/security/CVE-2026-34303
- https://ubuntu.com/security/CVE-2026-34304
- https://ubuntu.com/security/CVE-2026-34308
- https://ubuntu.com/security/CVE-2026-34317
- https://ubuntu.com/security/CVE-2026-34318
- https://ubuntu.com/security/CVE-2026-34319
- https://ubuntu.com/security/CVE-2026-35236
- https://ubuntu.com/security/CVE-2026-35237
- https://ubuntu.com/security/CVE-2026-35238
- https://ubuntu.com/security/CVE-2026-35239
- https://ubuntu.com/security/CVE-2026-35240
Affected packages
Ubuntu:Pro:20.04:LTS / mysql-8.0
Package
- Name
- mysql-8.0
- Purl
- pkg:deb/ubuntu/mysql-8.0?arch=source&distro=esm-infra%2Ffocal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed8.0.46-0ubuntu0.20.04.1+esm2
Affected versions
8.*
8.0.17-0ubuntu2
8.0.17-0ubuntu3
8.0.18-0ubuntu3
8.0.18-0ubuntu4
8.0.18-0ubuntu5
8.0.19-0ubuntu2
8.0.19-0ubuntu3
8.0.19-0ubuntu4
8.0.19-0ubuntu5
8.0.20-0ubuntu0.20.04.1
8.0.21-0ubuntu0.20.04.3
8.0.21-0ubuntu0.20.04.4
8.0.22-0ubuntu0.20.04.2
8.0.22-0ubuntu0.20.04.3
8.0.23-0ubuntu0.20.04.1
8.0.25-0ubuntu0.20.04.1
8.0.26-0ubuntu0.20.04.2
8.0.26-0ubuntu0.20.04.3
8.0.27-0ubuntu0.20.04.1
8.0.28-0ubuntu0.20.04.3
8.0.29-0ubuntu0.20.04.2
8.0.29-0ubuntu0.20.04.3
8.0.30-0ubuntu0.20.04.2
8.0.31-0ubuntu0.20.04.1
8.0.31-0ubuntu0.20.04.2
8.0.32-0buntu0.20.04.1
8.0.32-0ubuntu0.20.04.2
8.0.33-0ubuntu0.20.04.1
8.0.33-0ubuntu0.20.04.2
8.0.33-0ubuntu0.20.04.4
8.0.34-0ubuntu0.20.04.1
8.0.35-0ubuntu0.20.04.1
8.0.36-0ubuntu0.20.04.1
8.0.37-0ubuntu0.20.04.3
8.0.39-0ubuntu0.20.04.1
8.0.40-0ubuntu0.20.04.1
8.0.41-0ubuntu0.20.04.1
8.0.42-0ubuntu0.20.04.1
8.0.43-0ubuntu0.20.04.1+esm1
8.0.45-0ubuntu0.20.04.1+esm2
Ecosystem specific
{
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "libmysqlclient21"
},
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "mysql-client"
},
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "mysql-client-8.0"
},
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "mysql-client-core-8.0"
},
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "mysql-router"
},
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "mysql-server"
},
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "mysql-server-8.0"
},
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "mysql-server-core-8.0"
},
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "mysql-source-8.0"
},
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "mysql-testsuite"
},
{
"binary_version": "8.0.46-0ubuntu0.20.04.1+esm2",
"binary_name": "mysql-testsuite-8.0"
}
]
}
Database specific
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8363-2.json"
cves_map
{
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"cves": [
{
"id": "CVE-2026-21998",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-22001",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-22002",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-22004",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-22005",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-22009",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-22015",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-22017",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34267",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34270",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34271",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34276",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34278",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34293",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34303",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34304",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34308",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34317",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34318",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-34319",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-35236",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-35237",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-35238",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-35239",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2026-35240",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}