mysql-server 8.0.23-1: mysql-server 8.0.23-1 for Ubuntu 24.10 (oracular)

mysql-server 8.0.23-1, released January 16, 2026, fixes 24 CVEs in mysql-server. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

6.8

Base score, 0 to 10

Highest EPSS

0.1001

95th percentile

Priority of the 24 CVEs

Patch now 0
                                Urgent 0
                                High 0
                                Routine 24

Fixed package versions

Product	Release	Fixed in
mysql-server	Ubuntu 24.10 (oracular)	8.0.23-1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Routine	CVE-2021-2021	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	4.9	0.1001	None reported
Routine	CVE-2021-2011	mysql-server: Vulnerability in the MySQL Client product of Oracle MySQL (component: CAPI)	5.9	0.0309	None reported
Routine	CVE-2021-2002	mysql-server-8.0: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Replication)	4.9	0.0237	None reported
Routine	CVE-2021-2046	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure)	6.8	0.0234	None reported
Routine	CVE-2021-2031	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	4.9	0.0234	None reported
Routine	CVE-2021-2024	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	6.5	0.0227	None reported
Routine	CVE-2021-2036	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	4.9	0.0218	None reported
Routine	CVE-2021-2058	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Locking)	4.9	0.0218	None reported
Routine	CVE-2021-2060	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	4.9	0.0218	None reported
Routine	CVE-2021-2065	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	4.9	0.0218	None reported
Routine	CVE-2021-2070	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	4.9	0.0218	None reported
Routine	CVE-2021-2072	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure)	4.9	0.0218	None reported
Routine	CVE-2021-2076	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer)	4.9	0.0218	None reported
Routine	CVE-2021-2122	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL)	4.9	0.0212	None reported
Routine	CVE-2021-2081	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure)	4.9	0.0185	None reported
Routine	CVE-2021-2022	mysql-router: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	4.4	0.0178	None reported
Routine	CVE-2021-2048	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)	5.0	0.0176	None reported
Routine	CVE-2021-2038	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Components Services)	4.4	0.0174	None reported
Routine	CVE-2021-2056	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML)	4.4	0.0174	None reported
Routine	CVE-2021-2061	mysql-client: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DDL)	4.4	0.0174	None reported
Routine	CVE-2021-2032	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Information Schema)	4.3	0.0161	None reported
Routine	CVE-2021-2010	libmysqlclient21: Vulnerability in the MySQL Client product of Oracle MySQL (component: CAPI)	4.2	0.0143	None reported
Routine	CVE-2021-2087	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML)	4.4	0.0047	None reported
Routine	CVE-2021-2088	libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML)	4.4	0.0047	None reported

Also fixes CVE-2021-2021

RHSA-2021:3590
mecab, mecab-ipadic, mecab-ipadic-EUCJP and 7 more on RHEL 8
ELSA-2021-3590
mecab, mecab-ipadic, mecab-ipadic-EUCJP and 7 more on ol 8
libmysqlclient21 8.0.23-0ubuntu0.20.04.1
libmysqlclient21 on Ubuntu 20.04 LTS (focal)
mysql-client 8.0.23-0ubuntu0.20.04.1
mysql-client on Ubuntu 20.04 LTS (focal)
mysql-client-8.0 8.0.23-0ubuntu0.20.04.1
mysql-client-8.0 on Ubuntu 20.04 LTS (focal)
mysql-client-core-8.0 8.0.23-0ubuntu0.20.04.1
mysql-client-core-8.0 on Ubuntu 20.04 LTS (focal)
mysql-router 8.0.23-0ubuntu0.20.04.1
mysql-router on Ubuntu 20.04 LTS (focal)
mysql-server 8.0.23-0ubuntu0.20.04.1
mysql-server on Ubuntu 20.04 LTS (focal)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-oracular-mysql-server-8.0.23-1">mysql-server 8.0.23-1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.