CVE-2023-21867
Description
RHSA-2023:3087: mysql:8.0 security, bug fix, and enhancement update (Important)
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Mitigation details
Description mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023) CVSS v3: 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Errata / fixed releases ProductPackageAdvisoryReleased Red Hat Enterprise Linux 8mysql:8.0-8080020230322094358.63b34585RHSA-2023:30872023-05-16T00:00:00Z Red Hat Enterprise Linux 9mysql-0:8.0.32-1.el9_2RHSA-2023:26212023-05-09T00:00:00Z Red Hat Software…
Description
mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2023)
CVSS v3: 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Errata / fixed releases
| Product | Package | Advisory | Released |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | mysql:8.0-8080020230322094358.63b34585 | RHSA-2023:3087 | 2023-05-16T00:00:00Z |
| Red Hat Enterprise Linux 9 | mysql-0:8.0.32-1.el9_2 | RHSA-2023:2621 | 2023-05-09T00:00:00Z |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | rh-mysql80-mysql-0:8.0.32-1.el7 | RHSA-2023:1102 | 2023-03-07T00:00:00Z |
Package state
| Product | Package | State |
|---|---|---|
| Red Hat Enterprise Linux 6 | mysql | Not affected |
| Red Hat Enterprise Linux 7 | mariadb | Not affected |
| Red Hat Enterprise Linux 8 | mariadb:10.3/mariadb | Not affected |
| Red Hat Enterprise Linux 8 | mariadb:10.5/mariadb | Not affected |
| Red Hat Enterprise Linux 9 | mariadb | Not affected |
| Red Hat OpenStack Platform 10 (Newton) | mariadb-galera | Not affected |
| Red Hat OpenStack Platform 13 (Queens) | mariadb | Not affected |
| Red Hat Software Collections | rh-mariadb103-mariadb | Not affected |
| Red Hat Software Collections | rh-mariadb105-mariadb | Not affected |
Apply commands
yum update -y mysql:8
# or:
dnf upgrade -y mysql:8Affected
| Vendor | Product | Version |
|---|---|---|
| redhat | Red Hat Enterprise Linux 6 | Not affected |
| redhat | Red Hat Enterprise Linux 7 | Not affected |
| redhat | Red Hat Enterprise Linux 8 | Not affected |
| redhat | Red Hat Enterprise Linux 8 | Not affected |
| redhat | Red Hat Enterprise Linux 9 | Not affected |
| redhat | Red Hat OpenStack Platform 10 (Newton) | Not affected |
| redhat | Red Hat OpenStack Platform 13 (Queens) | Not affected |
| redhat | Red Hat Software Collections | Not affected |
| redhat | Red Hat Software Collections | Not affected |
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| rhel | 9 | fixed | |
| debian | sid | fixed | 8.0.32-1 |
| almalinux | 8 | fixed | mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.x86_64.rpm |
| almalinux | 9 | fixed | mysql-errmsg-8.0.32-1.el9_2.x86_64.rpm |
| rhel | 8 | fixed | |
References
- https://access.redhat.com/errata/RHSA-2023:2621
- https://security-tracker.debian.org/tracker/CVE-2023-21867
- https://access.redhat.com/errata/RHSA-2023:3087
- https://bugzilla.redhat.com/2142861
- https://bugzilla.redhat.com/2142863
- https://bugzilla.redhat.com/2142865
- https://bugzilla.redhat.com/2142868
- https://bugzilla.redhat.com/2142869
- https://bugzilla.redhat.com/2142870
- https://bugzilla.redhat.com/2142871
- https://bugzilla.redhat.com/2142872
- https://bugzilla.redhat.com/2142873
- https://bugzilla.redhat.com/2142875
- https://bugzilla.redhat.com/2142877
- https://bugzilla.redhat.com/2142879
- https://bugzilla.redhat.com/2142880
- https://bugzilla.redhat.com/2142881
- https://bugzilla.redhat.com/2162268
- https://bugzilla.redhat.com/2162270
- https://bugzilla.redhat.com/2162271
- https://bugzilla.redhat.com/2162272
- https://bugzilla.redhat.com/2162274
- https://bugzilla.redhat.com/2162275
- https://bugzilla.redhat.com/2162276
- https://bugzilla.redhat.com/2162277
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.