Skip to content

Commit 2a5b11f

Browse files
CBL-Mariner-BotKanishk-BansalKanishk Bansal
authored
[AUTO-CHERRYPICK] Upgrade mysql to 8.0.42 for fixing 25 CVEs - branch 3.0-dev (#13987)
Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com> Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com> Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
1 parent 985410a commit 2a5b11f

File tree

3 files changed

+10
-4
lines changed

3 files changed

+10
-4
lines changed

SPECS/mysql/mysql.signatures.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
22
"Signatures": {
3-
"mysql-boost-8.0.41.tar.gz": "719589993b1a6769edb82b59f28e0dab8d47df94fa53ac4e9340b7c5eaba937c"
3+
"mysql-boost-8.0.42.tar.gz": "c2aa67c618edfa1bc379107fe819ca8e94cba5d85f156d1053b8fedc88cc5f8f"
44
}
55
}

SPECS/mysql/mysql.spec

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
Summary: MySQL.
44
Name: mysql
5-
Version: 8.0.41
5+
Version: 8.0.42
66
Release: 1%{?dist}
77
License: GPLv2 with exceptions AND LGPLv2 AND BSD
88
Vendor: Microsoft Corporation
@@ -108,6 +108,12 @@ sudo -u test make test || { cat Testing/Temporary/LastTest.log; false; }
108108
%{_libdir}/pkgconfig/mysqlclient.pc
109109

110110
%changelog
111+
* Wed Jun 04 2025 Kanishk Bansal <kanbansal@microsoft.com> - 8.0.42-1
112+
- Upgrade to 8.0.42 to fix CVE-2025-30687, CVE-2025-30705, CVE-2025-30699, CVE-2025-30681, CVE-2025-30721, CVE-2025-21581, CVE-2025-30685,
113+
CVE-2025-30704, CVE-2025-30703, CVE-2025-30683, CVE-2025-30689, CVE-2025-21579, CVE-2025-30695, CVE-2025-21585, CVE-2025-30715,
114+
CVE-2025-21574, CVE-2025-30682, CVE-2025-21580, CVE-2025-21575, CVE-2025-21577, CVE-2025-30693, CVE-2025-30696, CVE-2025-30688,
115+
CVE-2025-21584, CVE-2025-30684
116+
111117
* Tue Mar 26 2025 Kanishk Bansal <kanbansal@microsoft.com> - 8.0.41-1
112118
- Upgrade to 8.0.41 to fix CVE-2025-21490 & CVE-2024-11053
113119
- Remove patch for CVE-2024-9681

cgmanifest.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13732,8 +13732,8 @@
1373213732
"type": "other",
1373313733
"other": {
1373413734
"name": "mysql",
13735-
"version": "8.0.41",
13736-
"downloadUrl": "https://dev.mysql.com/get/Downloads/MySQL-8.0/mysql-boost-8.0.41.tar.gz"
13735+
"version": "8.0.42",
13736+
"downloadUrl": "https://dev.mysql.com/get/Downloads/MySQL-8.0/mysql-boost-8.0.42.tar.gz"
1373713737
}
1373813738
}
1373913739
},

0 commit comments

Comments
 (0)