Hi Daniel, Thanks for taking the time to report this issue.
As per mysql 8.0.28 release notes [1], Support for the TLSv1 and TLSv1.1 connection protocols, which were deprecated since 8.0.26, was removed. The reason for the bump can be found in the package changelog in [2]. There you will find that several CVEs were addressed with that update. It is likely that the security team did consider backporting the patches to fix those, but there are times when it ends up making more sense to introduce a new version to patch those CVEs. I am subscribing the security team to this bug. [1] https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-28.html#mysqld-8-0-28-feature [2] https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1960291 Title: 8.0.28-0ubuntu0.20.04.3 Breaks SSL Connectivity to MySQL < 5.7 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-8.0/+bug/1960291/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
