CVES

mysql.spec

@@ -29,12 +29,12 @@
 %bcond_without conflicts
 %global sameevr   %{?epoch:%{epoch}:}%{version}-%{release}
 Name:                mysql
-Version:             8.0.24
-Release:             2
+Version:             8.0.26
+Release:             3
 Summary:             MySQL client programs and shared libraries
 URL:                 http://www.mysql.com
 License:             GPLv2 with exceptions and LGPLv2 and BSD
-Source0:             https://cdn.mysql.com/Downloads/MySQL-8.0/mysql-boost-%{version}.tar.gz
+Source0:             https://dev.mysql.com/get/Downloads/MySQL-8.0/mysql-boost-%{version}.tar.gz
 Source2:             mysql_config_multilib.sh
 Source3:             my.cnf.in
 Source6:             README.mysql-docs
@@ -536,6 +536,10 @@ fi
 %{_mandir}/man1/mysql_config.1*
 
 %changelog
+* Mon Aug 2 2021 liwu <liwu13@huawei.com> - 8.0.26-1
+- Upgrade mysql to 8.0.26,fix CVES:CVE-2021-2356 CVE-2021-2339 CVE-2021-2354
+  CVE-2021-2352 CVE-2021-2340
+ 
 * Wed Jun 16 2021 zhaoyao <zhaoyao32@huawei.com> - 8.0.24-2
 - Fix buiding error: Built target mysqlgcs error
 - Add m4 in BuildRequires