Re: Oracle Critical Patch Update Advisory - October 2021

[James Riddle]

Hi Peter,

This is a scan by Qualys with the following;

Consequence
-----------
Successful exploitation could allow an attacker to affect the confidentiality, integrity, and availability of data on the target system.


Diagnosis
---------
This Critical Patch Update contains 47 new security patches for Oracle MySQL.
Affected Versions:
MySQL Server, versions 5.7.35 and prior, 8.0.26 and prior.

QID Detection Logic (Unauthenticated):
This QID detects vulnerable versions of MySQL via the banner exposed by the service.

Solution
--------
Refer to vendor advisory Oracle MySQL October 2021 .
Patch:
Following are links for downloading patches to fix the vulnerabilities:

Oracle MySQL April 2021 Critical Patch Update (CPUOCT2021)