NetOps Performance Management Oracle MySQL July 2022 Critical Patch Update

Products

• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

Can you please let me know when can we have a resolution for the given Vulnerability below:

 

Oracle MySQL July 2022 Critical Patch Update (CPUJUL2022)

 

Key references for this are:

• cvss 9.8
• category Oracle MySQL July 2022 Critical Patch Update (CPUJUL2022)
• kb_cves ["CVE-2022-21455","CVE-2022-21556","CVE-2022-1292","CVE-2022-21515","CVE-2018-25032","CVE-2022-27778","CVE-2022-21509","CVE-2022-21517","CVE-2022-21522","CVE-2022-21525","CVE-2022-21526","CVE-2022-21527","CVE-2022-21528","CVE-2022-21529","CVE-2022-21530","CVE-2022-21531","CVE-2022-21534","CVE-2022-21537","CVE-2022-21538","CVE-2022-21539","CVE-2022-21547","CVE-2022-21553","CVE-2022-21569"]
  
  

When will the DX NetOps Performance Management Portal web server MySql implementation be upgraded to remediate these vulnerabilities?

Environment

DX NetOps Performance Management releases r22.2.1 and earlier

Cause

MySql vulnerabilities that require remediation

Resolution

These are resolve as of the DX NetOps Performance Management release 22.2.2. All releases running 22.2.2 and newer versions come with MySql 8.0.30 or newer which will remediate this reported vulnerability.

Upgrade to 22.2.2 or newer to resolve this.