Ubuntu releases security updates for MySQL across multiple LTS and interim versions

Canonical has issued a security notice addressing multiple vulnerabilities discovered in the MySQL database server. The update affects a wide range of Ubuntu users, including those on long-term support (LTS) releases and interim versions.

Users on Ubuntu 26.04 LTS will receive MySQL 8.4.13, while Ubuntu 26.10 users are updated to MySQL 9.7.4. For older environments, including Ubuntu 22.04 LTS and 24.04 LTS, Ubuntu has provided backported patches to mitigate the identified security risks without requiring a full version upgrade.

Security patch implementation and versioning

• Version Updates: Ubuntu 26.04 LTS moves to MySQL 8.4.13, and Ubuntu 26.10 moves to MySQL 9.7.4.
• Backporting Strategy: Ubuntu 22.04 LTS and 24.04 LTS receive specific security patches backported to their existing package versions to maintain stability.
• Package Contents: Beyond security fixes, the updated packages include various bug fixes, new features, and potential breaking changes as noted in the upstream MySQL release notes.
• Vulnerability Context: The updates address security issues identified in the Oracle Critical Patch Update (CPU) for October 2026.

Why it matters

System administrators managing database workloads on Ubuntu must apply these updates to protect against known exploits. The use of backported patches for 22.04 and 24.04 LTS ensures that production environments can remain secure without the risk of major version migrations.