Red Hat Security Advisory

RHSA-2014:0536

mysql55-mysql security update

Released 2014-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) mysql55-mysql-5.5.37-1.el5, mysql55-mysql-5.5.37-1.el5.i386, mysql55-mysql-5.5.37-1.el5.ia64 +21
Red Hat Enterprise Linux Desktop (v. 5 client) mysql55-mysql-5.5.37-1.el5, mysql55-mysql-5.5.37-1.el5.i386, mysql55-mysql-bench-5.5.37-1.el5 +7
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mysql55-mysql-5.5.37-1.el5, mysql55-mysql-devel-5.5.37-1.el5, mysql55-mysql-devel-5.5.37-1.el5.i386

Fixes 7 records

TI-2014-01946 CVE-2014-2436 · GHSA-m3jx-759h-r3c9

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and…

LOW 35

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RBR.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03769 Published 2014-04-16 Partial fix

TI-2014-01929 CVE-2014-2419 · GHSA-4897-58h4-x2qh

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and…

LOW 25

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03733 Published 2014-04-16 Partial fix

TI-2014-00364 CVE-2014-0384 · GHSA-63xc-347m-5jq4

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and…

LOW 25

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03295 Published 2014-04-15 Partial fix

TI-2014-01948 CVE-2014-2438 · GHSA-7hcx-w2fp-wfhr

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and…

LOW 23

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03164 Published 2014-04-16 Partial fix

TI-2014-01940 CVE-2014-2430 · GHSA-8r7w-hm4m-fpwp

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and…

LOW 23

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03269 Published 2014-04-16 Partial fix

TI-2014-01941 CVE-2014-2431 · GHSA-p83p-7pm4-f79w

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and…

LOW 21

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.05059 Published 2014-04-16 Partial fix

TI-2014-01942 CVE-2014-2432 · GHSA-8449-jjjh-pwqh

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15…

LOW 20

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated.

CVSS 2.0LOW 2.8 Network Low privileges Interaction — EPSS 0.0344 Published 2014-04-16 Partial fix