This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============6883372635399101585==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="eNgykpS5Ie5M3xnCVTfM2gGrZCNDoNMmu"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--eNgykpS5Ie5M3xnCVTfM2gGrZCNDoNMmu
Content-Type: multipart/mixed;
 boundary="OeAeQSN5mp8XIiNpwABQ6KI0yz0ynfCyB";
 protected-headers="v1"
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: ubuntu-security-announce@lists.ubuntu.com
Message-ID: <43733d77-6194-8d92-e8a7-1aeaae38989b@canonical.com>
Subject: [USN-3957-1] MySQL vulnerabilities

--OeAeQSN5mp8XIiNpwABQ6KI0yz0ynfCyB
Content-Type: text/plain; charset=utf-8
Content-Language: en-C
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-3957-1
April 29, 2019

mysql-5.7 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 19.04
- Ubuntu 18.10
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in MySQL.

Software Description:
- mysql-5.7: MySQL database

Details:

Multiple security issues were discovered in MySQL and this update includes
a new upstream MySQL version to fix these issues.

Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04 have
been updated to MySQL 5.7.26.

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Please see the following for more information:
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-26.html
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  mysql-server-5.7                5.7.26-0ubuntu0.19.04.1

Ubuntu 18.10:
  mysql-server-5.7                5.7.26-0ubuntu0.18.10.1

Ubuntu 18.04 LTS:
  mysql-server-5.7                5.7.26-0ubuntu0.18.04.1

Ubuntu 16.04 LTS:
  mysql-server-5.7                5.7.26-0ubuntu0.16.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References:
  https://usn.ubuntu.com/usn/usn-3957-1
  CVE-2019-2566, CVE-2019-2581, CVE-2019-2592, CVE-2019-2614,
  CVE-2019-2627, CVE-2019-2628, CVE-2019-2632, CVE-2019-2683

Package Information:
  https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.26-0ubuntu0.19.04.1
  https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.26-0ubuntu0.18.10.1
  https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.26-0ubuntu0.18.04.1
  https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.26-0ubuntu0.16.04.1


--OeAeQSN5mp8XIiNpwABQ6KI0yz0ynfCyB--

--eNgykpS5Ie5M3xnCVTfM2gGrZCNDoNMmu
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=HZ7J
-----END PGP SIGNATURE-----

--eNgykpS5Ie5M3xnCVTfM2gGrZCNDoNMmu--


--===============6883372635399101585==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK

--===============6883372635399101585==--