**MySQL 8.0.20**

Release notes :

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html

CVEs fixed :

CVE-2020-2759 CVE-2020-2761 CVE-2020-2762 CVE-2020-2763 CVE-2020-2765 CVE-2020-2770 CVE-2020-2774 CVE-2020-2779 CVE-2020-2780 CVE-2020-2804 CVE-2020-2812 CVE-2020-2814 CVE-2020-2853 CVE-2020-2892 CVE-2020-2893 CVE-2020-2895 CVE-2020-2896 CVE-2020-2897 CVE-2020-2898 CVE-2020-2901 CVE-2020-2903 CVE-2020-2904 CVE-2020-2921 CVE-2020-2923 CVE-2020-2924 CVE-2020-2925 CVE-2020-2926 CVE-2020-2928 CVE-2020-2930 CVE-2020-2760

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-844:01 advisory.

    mysql: Server: Security: Privileges multiple unspecified vulnerabilities     (CVE-2020-14663, CVE-2020-14678, CVE-2020-14697, CVE-2020-2761, CVE-2020-2774,     CVE-2020-2779, CVE-2020-2853, CVE-2020-14586, CVE-2020-14702)         mysql: Server: Security: Encryption multiple unspecified vulnerabilities     (CVE-2019-2914, CVE-2019-2957)         mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2938,     CVE-2019-2963, CVE-2019-2968, CVE-2019-3018, CVE-2020-2577, CVE-2020-2589,     CVE-2020-2760, CVE-2020-2762, CVE-2020-2814, CVE-2020-2893, CVE-2020-2895,     CVE-2020-14568, CVE-2020-14623, CVE-2020-14633, CVE-2020-14634)         mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2946,     CVE-2020-2925)         mysql: Server: Replication multiple unspecified vulnerabilities     (CVE-2019-2960, CVE-2020-2759, CVE-2020-2763, CVE-2020-14567)         mysql: Server: Optimizer multiple unspecified vulnerabilities     (CVE-2019-2966, CVE-2019-2967, CVE-2019-2974, CVE-2019-2982, CVE-2019-2991,     CVE-2019-2998, CVE-2020-2579, CVE-2020-2660, CVE-2020-2679, CVE-2020-2686,     CVE-2020-2765, CVE-2020-2892, CVE-2020-2897, CVE-2020-2901, CVE-2020-2904,     CVE-2020-2923, CVE-2020-2924, CVE-2020-2928, CVE-2020-14539, CVE-2020-14547,     CVE-2020-14597, CVE-2020-14614, CVE-2020-14654, CVE-2020-14680, CVE-2020-14725)         mysql: Server: C API multiple unspecified vulnerabilities (CVE-2019-2993,     CVE-2019-3011)         mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2997,     CVE-2020-2580)         mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-3004,     CVE-2020-2627, CVE-2020-2930, CVE-2020-14619)         mysql: Server: Connection unspecified vulnerability (CVE-2019-3009)         mysql: Server: Options multiple unspecified vulnerabilities (CVE-2020-2584,     CVE-2020-14632)         mysql: Server: DML multiple unspecified vulnerabilities (CVE-2020-2588,     CVE-2020-2780, CVE-2020-14540, CVE-2020-14575, CVE-2020-14620)         mysql: C API multiple unspecified vulnerabilities (CVE-2020-2752,     CVE-2020-2922, CVE-2020-14550, CVE-2020-2570, CVE-2020-2573, CVE-2020-2574)         mysql: Server: Logging unspecified vulnerability (CVE-2020-2770)         mysql: Server: Memcached unspecified vulnerability (CVE-2020-2804)         mysql: Server: Stored Procedure unspecified vulnerability (CVE-2020-2812)         mysql: Server: Information Schema multiple unspecified vulnerabilities     (CVE-2020-2896, CVE-2020-14559, CVE-2020-2694)         mysql: Server: Charsets unspecified vulnerability (CVE-2020-2898)         mysql: Server: Connection Handling unspecified vulnerability (CVE-2020-2903)         mysql: Server: Group Replication Plugin unspecified vulnerability     (CVE-2020-2921)         mysql: Server: Group Replication GCS unspecified vulnerability     (CVE-2020-2926)         mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2020-14553)         mysql: Server: UDF unspecified vulnerability (CVE-2020-14576)         mysql: Server: JSON unspecified vulnerability (CVE-2020-14624)         mysql: Server: Security: Audit unspecified vulnerability (CVE-2020-14631)         mysql: Server: Security: Roles multiple unspecified vulnerabilities     (CVE-2020-14641, CVE-2020-14643, CVE-2020-14651)         mysql: Server: Locking unspecified vulnerability (CVE-2020-14656)         mysql: Information Schema unspecified vulnerability (CVE-2019-2911)     Modularity name: mysql     Stream name: 8.0

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3732 advisory.

    mysql     [8.0.21-1]
    - Rebase to 8.0.21
    - Use bundled libzstd and libevent for RHSCL and RHEL-8.0.0
    - Check that we have correct versions in bundled(*) Provides
    - Remove re2 bundled dependency

    [8.0.20-1]
    - Rebase to 8.0.20

    [8.0.19-2]
    - Specify all perl dependencies

    [8.0.19-1]
    - Rebase to 8.0.19

    [8.0.18-1]
    - Rebase to 8.0.18
    - Add libzstd-devel dependencies
    - Include patch to build against protobuf 3.11

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4350-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to     fix these issues.

    MySQL has been updated to 8.0.80 in Ubuntu 19.10 and Ubuntu 20.04 LTS. Ubuntu 16.04 LTS and Ubuntu 18.04     LTS have been updated to MySQL 5.7.30.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:

    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-30.html

    https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-20.html

    https://www.oracle.com/security-alerts/cpuapr2020.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
136434	Fedora 31 : community-mysql (2020-261c9ddd7c)	Nessus	Fedora Local Security Checks	2020/5/11	2020/5/13	medium
294553	MiracleLinux 8 : mysql:8.0 (AXSA:2020-844:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
140614	Oracle Linux 8 : mysql:8.0 (ELSA-2020-3732)	Nessus	Oracle Linux Local Security Checks	2020/9/17	2024/7/9	high
235953	Alibaba Cloud Linux 3 : 0097: mysql:8.0 (ALINUX3-SA-2021:0097)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/15	high
136399	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-4350-1)	Nessus	Ubuntu Local Security Checks	2020/5/7	2024/8/27	medium

检测

插件搜索

medium

medium

high

high

medium