Red Hat Security Advisory

RHSA-2016:1601

rh-mysql56-mysql security update

Released 2016-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mysql56-mysql-5.6.32-1.el6, rh-mysql56-mysql-bench-5.6.32-1.el6, rh-mysql56-mysql-common-5.6.32-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mysql56-mysql-5.6.32-1.el7, rh-mysql56-mysql-bench-5.6.32-1.el7, rh-mysql56-mysql-common-5.6.32-1.el7 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) rh-mysql56-mysql-5.6.32-1.el6, rh-mysql56-mysql-bench-5.6.32-1.el6, rh-mysql56-mysql-common-5.6.32-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-mysql56-mysql-5.6.32-1.el6, rh-mysql56-mysql-bench-5.6.32-1.el6, rh-mysql56-mysql-common-5.6.32-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) rh-mysql56-mysql-5.6.32-1.el7, rh-mysql56-mysql-bench-5.6.32-1.el7, rh-mysql56-mysql-common-5.6.32-1.el7 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) rh-mysql56-mysql-5.6.32-1.el7, rh-mysql56-mysql-bench-5.6.32-1.el7, rh-mysql56-mysql-common-5.6.32-1.el7 +5
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mysql56-mysql-5.6.32-1.el6, rh-mysql56-mysql-bench-5.6.32-1.el6, rh-mysql56-mysql-common-5.6.32-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mysql56-mysql-5.6.32-1.el7, rh-mysql56-mysql-bench-5.6.32-1.el7, rh-mysql56-mysql-common-5.6.32-1.el7 +5

Fixes 15 records

TI-2016-02981 CVE-2016-3521 · GHSA-h534-4fvw-mm64

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and…

MEDIUM 42

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to af…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.10441 Published 2016-07-21 Partial fix

TI-2016-02937 CVE-2016-3477 · GHSA-x24r-xfh8-7ww8

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and…

LOW 38

CVSS 3.0HIGH 8.1 Local No auth No interaction EPSS 0.00466 Published 2016-07-21 Partial fix

TI-2016-02946 CVE-2016-3486 · GHSA-28qm-6v7q-2wqv

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier…

LOW 36

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04162 Published 2016-07-21 Fixed

TI-2016-04878 CVE-2016-5612 · GHSA-xqm7-6fmh-f42h

Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and…

LOW 35

Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03714 Published 2016-10-25 Partial fix

TI-2016-04875 CVE-2016-5609 · GHSA-86fv-pmqm-jfh2

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier…

LOW 35

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0334 Published 2016-10-25 Fixed

TI-2016-02961 CVE-2016-3501 · GHSA-jr7j-wvj3-67fh

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier…

LOW 35

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03781 Published 2016-07-21 Fixed

TI-2016-04891 CVE-2016-5627 · GHSA-vgp7-98cc-5rpv

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier…

LOW 34

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to Server: InnoDB.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02796 Published 2016-10-25 Fixed

TI-2016-03068 CVE-2016-3615 · GHSA-6rqj-j79f-57vc

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and…

LOW 33

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0568 Published 2016-07-21 Partial fix

TI-2016-04714 CVE-2016-5440 · GHSA-jgx2-h5wg-8cmc

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and…

LOW 29

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03854 Published 2016-07-21 Partial fix

TI-2016-03067 CVE-2016-3614 · GHSA-w656-2x94-f758

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier…

LOW 29

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption.

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02321 Published 2016-07-21 Fixed

TI-2016-02919 CVE-2016-3459 · GHSA-9c7x-wvr8-xvf2

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and…

LOW 28

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to S…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03252 Published 2016-07-21 Fixed

TI-2016-04713 CVE-2016-5439 · GHSA-x299-qxgq-hg7j

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier…

LOW 27

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Privileges.

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.02531 Published 2016-07-21 Fixed

TI-2016-04894 CVE-2016-5630 · GHSA-9xmr-p5wr-w8xj

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier…

LOW 26

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02023 Published 2016-10-25 Fixed

TI-2016-06807 CVE-2016-8288 · GHSA-h52q-hp7h-5x52

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier…

LOW 18

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect integrity via vectors related to Server: InnoDB Plugin.

CVSS 3.0LOW 3.1 Network Low privileges No interaction EPSS 0.01612 Published 2016-10-25 Fixed CWE-284

TI-2016-06803 CVE-2016-8284 · GHSA-876r-cqqg-qm3c

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier…

LOW 10

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows local users to affect availability via vectors related to Server: Replication.

CVSS 3.0LOW 1.8 Local High privileges User interaction EPSS 0.00404 Published 2016-10-25 Fixed