A MySQL security update has been released for Ubuntu Linux 20.04 LTS.
==========================================================================
Ubuntu Security Notice USN-4651-1
November 30, 2020
mysql-8.0 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
Summary:
MySQL could allow unintended access to network services.
Software Description:
- mysql-8.0: MySQL database
Details:
Tom Reynolds discovered that due to a packaging error, the MySQL X Plugin
was listening to all network interfaces by default, contrary to
expectations.
This update changes the default MySQL configuration to bind the MySQL X
Plugin to localhost only. This change may impact environments where the
MySQL X Plugin needs to be accessible from the network. The
mysqlx-bind-address setting in the /etc/mysql/mysql.conf.d/mysqld.cnf file
can be modified to allow network access.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS:
mysql-server-8.0 8.0.22-0ubuntu0.20.04.3
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4651-1
https://launchpad.net/bugs/1857584
Package Information:
https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.3