GCP 上 Cloud SQL 的漏洞

Question

I am now using Cloud SQL for MySQL on Google Cloud Platform.

The version of MySQL is "8.0.18".

Recently, I found that MySQL version 8.0.21 or prior had vulnerability for CVE-2020-14878. https://nvd.nist.gov/vuln/detail/CVE-2020-14878

My simple question is Cloud SQL for MySQL (version 8.0.18) has patched for the CVEs such as above vulnerabilities?

Answer 1

I agree with guillaume blaquiere It's related to LDAP auth. LDAP isn't used on Cloud SQL, Cloud SQL ignores unrelated CVE cases.

For more information you can refer to the Documentation on production update on Cloud SQL and Documentation on SQL vulnerability findings.

Answer 2

Google Cloud SQL keeps on providing important patches, as mentioned here .

However, if you are interested in anything in particular, its best to raise a support case with Google Cloud.