Red Hat Security Advisory

RHSA-2015:1630

rh-mysql56-mysql security update

Released 2015-08-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mysql56-mysql-5.6.26-1.el6, rh-mysql56-mysql-bench-5.6.26-1.el6, rh-mysql56-mysql-common-5.6.26-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mysql56-mysql-5.6.26-1.el7, rh-mysql56-mysql-bench-5.6.26-1.el7, rh-mysql56-mysql-common-5.6.26-1.el7 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.5) rh-mysql56-mysql-5.6.26-1.el6, rh-mysql56-mysql-bench-5.6.26-1.el6, rh-mysql56-mysql-common-5.6.26-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) rh-mysql56-mysql-5.6.26-1.el6, rh-mysql56-mysql-bench-5.6.26-1.el6, rh-mysql56-mysql-common-5.6.26-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) rh-mysql56-mysql-5.6.26-1.el7, rh-mysql56-mysql-bench-5.6.26-1.el7, rh-mysql56-mysql-common-5.6.26-1.el7 +5
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mysql56-mysql-5.6.26-1.el6, rh-mysql56-mysql-bench-5.6.26-1.el6, rh-mysql56-mysql-common-5.6.26-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mysql56-mysql-5.6.26-1.el7, rh-mysql56-mysql-bench-5.6.26-1.el7, rh-mysql56-mysql-common-5.6.26-1.el7 +5

Fixes 25 records

TI-2015-02305 CVE-2015-2617 · GHSA-2wmh-359c-rw99

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 34

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Partition.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03064 Published 2015-07-16 Fixed

TI-2015-04040 CVE-2015-4819 · GHSA-jfc7-8mx8-j3w5

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and…

LOW 32

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client programs.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00454 Published 2015-10-21 Partial fix

TI-2015-04097 CVE-2015-4879 · GHSA-82r2-v9cp-fxcv

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and…

LOW 28

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML.

CVSS 2.0MEDIUM 4.6 Network Low privileges Interaction — EPSS 0.04207 Published 2015-10-21 Partial fix

TI-2015-02308 CVE-2015-2620 · GHSA-w97j-x2ff-rr4p

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and…

LOW 28

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0472 Published 2015-07-16 Partial fix

TI-2015-03979 CVE-2015-4757 · GHSA-vx7r-p6jx-hf82

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and…

LOW 27

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.06915 Published 2015-07-16 Partial fix

TI-2015-03974 CVE-2015-4752 · GHSA-j985-v78q-pcwf

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to Server : I_S.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04083 Published 2015-07-16 Partial fix

TI-2015-02336 CVE-2015-2648 · GHSA-qc49-rpfg-7h6m

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04333 Published 2015-07-16 Partial fix

TI-2015-02331 CVE-2015-2643 · GHSA-mhfw-jv7r-2344

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04333 Published 2015-07-16 Partial fix

TI-2015-02270 CVE-2015-2582 · GHSA-fw8r-p4q8-w66f

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and…

LOW 26

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04333 Published 2015-07-16 Partial fix

TI-2015-04120 CVE-2015-4904 · GHSA-pf9r-2fmw-q7j5

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to libmysqld.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02579 Published 2015-10-21 Fixed

TI-2015-04053 CVE-2015-4833 · GHSA-g4v8-3p3c-cjm9

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02564 Published 2015-10-21 Fixed

TI-2015-03994 CVE-2015-4772 · GHSA-fgrv-fgcx-mm52

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03107 Published 2015-07-16 Fixed

TI-2015-03978 CVE-2015-4756 · GHSA-mc23-6jmw-p76x

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0439.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03023 Published 2015-07-16 Fixed

TI-2015-02299 CVE-2015-2611 · GHSA-v38g-3jw9-pv2j

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 24

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.03086 Published 2015-07-16 Fixed

TI-2015-03959 CVE-2015-4737 · GHSA-rc67-r6fc-3mxg

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and…

LOW 23

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Pluggable Auth.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0362 Published 2015-07-16 Partial fix

TI-2015-04112 CVE-2015-4895 · GHSA-9rvh-82m7-gmr2

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote…

LOW 22

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02879 Published 2015-10-21 Fixed

TI-2015-03993 CVE-2015-4771 · GHSA-h865-g436-7cf6

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 22

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to RBR.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02604 Published 2015-07-16 Fixed

TI-2015-03991 CVE-2015-4769 · GHSA-5h69-v8fc-cwrm

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 22

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Firewall, a different vulnerability than CVE…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02604 Published 2015-07-16 Fixed

TI-2015-03983 CVE-2015-4761 · GHSA-qffc-rj73-gmmj

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 22

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Memcached.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02545 Published 2015-07-16 Fixed

TI-2015-02329 CVE-2015-2641 · GHSA-xpfv-r9w9-w48r

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 22

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02587 Published 2015-07-16 Fixed

TI-2015-04082 CVE-2015-4864 · GHSA-78fj-8qvw-m3wg

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and…

LOW 21

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02388 Published 2015-10-21 Partial fix

TI-2015-02327 CVE-2015-2639 · GHSA-w2qj-ff27-7rv3

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 21

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Firewall.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02387 Published 2015-07-16 Fixed

TI-2015-03989 CVE-2015-4767 · GHSA-pfm3-rvf7-h49f

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote…

LOW 15

CVSS 2.0LOW 1.7 Network Low privileges Interaction — EPSS 0.02806 Published 2015-07-16 Fixed

TI-2015-03988 CVE-2015-4766 · GHSA-rfv6-gp3v-pxv2

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows local users to…

LOW 11

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows local users to affect availability via unknown vectors related to Server : Security : Firewall.

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00384 Published 2015-10-21 Fixed

TI-2015-02349 CVE-2015-2661 · GHSA-3r96-g8cq-424w

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows local users to…

LOW 11

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows local users to affect availability via unknown vectors related to Client.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00411 Published 2015-07-16 Fixed