CVE-2023-22066
Description
Moderate: mysql security update
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2024-1141.html
Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2024-0894.html
Vendor advisory: alma — https://bugzilla.redhat.com/2258794
Vendor advisory: alma — https://bugzilla.redhat.com/2258793
Vendor advisory: alma — https://bugzilla.redhat.com/2258792
Vendor advisory: alma — https://bugzilla.redhat.com/2258791
Vendor advisory: alma — https://bugzilla.redhat.com/2258790
Vendor advisory: alma — https://bugzilla.redhat.com/2258789
Vendor advisory: alma — https://bugzilla.redhat.com/2258788
Vendor advisory: alma — https://bugzilla.redhat.com/2258787
Vendor advisory: alma — https://bugzilla.redhat.com/2258785
Vendor advisory: alma — https://bugzilla.redhat.com/2258784
Vendor advisory: alma — https://bugzilla.redhat.com/2258783
Vendor advisory: alma — https://bugzilla.redhat.com/2258782
Vendor advisory: alma — https://bugzilla.redhat.com/2258781
Vendor advisory: alma — https://bugzilla.redhat.com/2258780
Vendor advisory: alma — https://bugzilla.redhat.com/2258779
Vendor advisory: alma — https://bugzilla.redhat.com/2258778
Vendor advisory: alma — https://bugzilla.redhat.com/2258777
Vendor advisory: alma — https://bugzilla.redhat.com/2258776
Vendor advisory: alma — https://bugzilla.redhat.com/2258775
Vendor advisory: alma — https://bugzilla.redhat.com/2258774
Vendor advisory: alma — https://bugzilla.redhat.com/2258773
Vendor advisory: alma — https://bugzilla.redhat.com/2258772
Vendor advisory: alma — https://bugzilla.redhat.com/2258771
Vendor advisory: alma — https://bugzilla.redhat.com/2245034
Vendor advisory: alma — https://bugzilla.redhat.com/2245033
Vendor advisory: alma — https://bugzilla.redhat.com/2245032
Vendor advisory: alma — https://bugzilla.redhat.com/2245031
Vendor advisory: alma — https://bugzilla.redhat.com/2245030
Vendor advisory: alma — https://bugzilla.redhat.com/2245029
Vendor advisory: alma — https://bugzilla.redhat.com/2245028
Vendor advisory: alma — https://bugzilla.redhat.com/2245027
Vendor advisory: alma — https://bugzilla.redhat.com/2245026
Vendor advisory: alma — https://bugzilla.redhat.com/2245024
Vendor advisory: alma — https://bugzilla.redhat.com/2245023
Vendor advisory: alma — https://bugzilla.redhat.com/2245022
Vendor advisory: alma — https://bugzilla.redhat.com/2245021
Vendor advisory: alma — https://bugzilla.redhat.com/2245020
Vendor advisory: alma — https://bugzilla.redhat.com/2245019
Vendor advisory: alma — https://bugzilla.redhat.com/2245018
Vendor advisory: alma — https://bugzilla.redhat.com/2245017
Vendor advisory: alma — https://bugzilla.redhat.com/2245016
Vendor advisory: alma — https://bugzilla.redhat.com/2245015
Vendor advisory: alma — https://bugzilla.redhat.com/2245014
Vendor advisory: alma — https://bugzilla.redhat.com/2224222
Vendor advisory: alma — https://bugzilla.redhat.com/2224221
Vendor advisory: alma — https://bugzilla.redhat.com/2224220
Vendor advisory: alma — https://bugzilla.redhat.com/2224219
Vendor advisory: alma — https://bugzilla.redhat.com/2224218
Vendor advisory: alma — https://bugzilla.redhat.com/2224217
Vendor advisory: alma — https://bugzilla.redhat.com/2224216
Vendor advisory: alma — https://bugzilla.redhat.com/2224215
Vendor advisory: alma — https://bugzilla.redhat.com/2224214
Vendor advisory: alma — https://bugzilla.redhat.com/2224213
Vendor advisory: alma — https://bugzilla.redhat.com/2224212
Vendor advisory: alma — https://bugzilla.redhat.com/2224211
Vendor advisory: alma — https://bugzilla.redhat.com/2188132
Vendor advisory: alma — https://bugzilla.redhat.com/2188131
Vendor advisory: alma — https://bugzilla.redhat.com/2188130
Vendor advisory: alma — https://bugzilla.redhat.com/2188129
Vendor advisory: alma — https://bugzilla.redhat.com/2188128
Vendor advisory: alma — https://bugzilla.redhat.com/2188127
Vendor advisory: alma — https://bugzilla.redhat.com/2188125
Vendor advisory: alma — https://bugzilla.redhat.com/2188124
Vendor advisory: alma — https://bugzilla.redhat.com/2188123
Vendor advisory: alma — https://bugzilla.redhat.com/2188122
Vendor advisory: alma — https://bugzilla.redhat.com/2188121
Vendor advisory: alma — https://bugzilla.redhat.com/2188120
Vendor advisory: alma — https://bugzilla.redhat.com/2188119
Vendor advisory: alma — https://bugzilla.redhat.com/2188118
Vendor advisory: alma — https://bugzilla.redhat.com/2188117
Vendor advisory: alma — https://bugzilla.redhat.com/2188116
Vendor advisory: alma — https://bugzilla.redhat.com/2188115
Vendor advisory: alma — https://bugzilla.redhat.com/2188113
Vendor advisory: alma — https://bugzilla.redhat.com/2188109
Vendor advisory: alma — https://bugzilla.redhat.com/2179864
Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2024:0894
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2023-22066
Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2024:0894
Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2024:1141
Mitigation details
Description mysql: InnoDB unspecified vulnerability (CPU Oct 2023) CVSS v3: 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Errata / fixed releases ProductPackageAdvisoryReleased Red Hat Enterprise Linux 8mysql:8.0-8090020240126173013.a75119d5RHSA-2024:08942024-02-20T00:00:00Z Red Hat Enterprise Linux 9mysql-0:8.0.36-1.el9_3RHSA-2024:11412024-03-05T00:00:00Z Red Hat Software Collections for…
Description
mysql: InnoDB unspecified vulnerability (CPU Oct 2023)
CVSS v3: 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Errata / fixed releases
| Product | Package | Advisory | Released |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | mysql:8.0-8090020240126173013.a75119d5 | RHSA-2024:0894 | 2024-02-20T00:00:00Z |
| Red Hat Enterprise Linux 9 | mysql-0:8.0.36-1.el9_3 | RHSA-2024:1141 | 2024-03-05T00:00:00Z |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | rh-mysql80-mysql-0:8.0.36-1.el7 | RHSA-2024:2619 | 2024-04-30T00:00:00Z |
Package state
| Product | Package | State |
|---|---|---|
| Red Hat Enterprise Linux 6 | mysql | Not affected |
| Red Hat Enterprise Linux 7 | mariadb | Not affected |
| Red Hat Enterprise Linux 8 | mariadb:10.3/mariadb | Not affected |
| Red Hat Enterprise Linux 8 | mariadb:10.5/mariadb | Not affected |
| Red Hat Enterprise Linux 9 | mariadb | Not affected |
| Red Hat Software Collections | rh-mariadb105-mariadb | Not affected |
Apply commands
yum update -y mysql:8
# or:
dnf upgrade -y mysql:8
Affected
| Vendor | Product | Version |
|---|---|---|
| redhat | Red Hat Enterprise Linux 6 | Not affected |
| redhat | Red Hat Enterprise Linux 7 | Not affected |
| redhat | Red Hat Enterprise Linux 8 | Not affected |
| redhat | Red Hat Enterprise Linux 8 | Not affected |
| redhat | Red Hat Enterprise Linux 9 | Not affected |
| redhat | Red Hat Software Collections | Not affected |
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| rhel | 9 | fixed | |
| rocky | 8 | fixed | |
| debian | sid | fixed | 8.0.35-1 |
| almalinux | 8 | fixed | mecab-ipadic-2.7.0.20070801-16.module_el8.6.0+3340+d764b636.x86_64.rpm |
| almalinux | 9 | fixed | mysql-errmsg-8.0.36-1.el9_3.x86_64.rpm |
References
- https://access.redhat.com/errata/RHSA-2024:1141
- https://errata.rockylinux.org/RLSA-2024:0894
- https://security-tracker.debian.org/tracker/CVE-2023-22066
- https://access.redhat.com/errata/RHSA-2024:0894
- https://bugzilla.redhat.com/2179864
- https://bugzilla.redhat.com/2188109
- https://bugzilla.redhat.com/2188113
- https://bugzilla.redhat.com/2188115
- https://bugzilla.redhat.com/2188116
- https://bugzilla.redhat.com/2188117
- https://bugzilla.redhat.com/2188118
- https://bugzilla.redhat.com/2188119
- https://bugzilla.redhat.com/2188120
- https://bugzilla.redhat.com/2188121
- https://bugzilla.redhat.com/2188122
- https://bugzilla.redhat.com/2188123
- https://bugzilla.redhat.com/2188124
- https://bugzilla.redhat.com/2188125
- https://bugzilla.redhat.com/2188127
- https://bugzilla.redhat.com/2188128
- https://bugzilla.redhat.com/2188129
- https://bugzilla.redhat.com/2188130
- https://bugzilla.redhat.com/2188131
- https://bugzilla.redhat.com/2188132
- https://bugzilla.redhat.com/2224211
Verify integrity in audit chain (admin only). AS-IS.