Red Hat Security AdvisoryRHSA-2016:2130
mysql55-mysql security update
Released 2016-10-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) mysql55-mysql-5.5.52-1.el6, mysql55-mysql-bench-5.5.52-1.el6, mysql55-mysql-devel-5.5.52-1.el6 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) mysql55-mysql-5.5.52-1.el7, mysql55-mysql-bench-5.5.52-1.el7, mysql55-mysql-devel-5.5.52-1.el7 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) mysql55-mysql-5.5.52-1.el6, mysql55-mysql-bench-5.5.52-1.el6, mysql55-mysql-devel-5.5.52-1.el6 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) mysql55-mysql-5.5.52-1.el6, mysql55-mysql-bench-5.5.52-1.el6, mysql55-mysql-devel-5.5.52-1.el6 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) mysql55-mysql-5.5.52-1.el7, mysql55-mysql-bench-5.5.52-1.el7, mysql55-mysql-devel-5.5.52-1.el7 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) mysql55-mysql-5.5.52-1.el7, mysql55-mysql-bench-5.5.52-1.el7, mysql55-mysql-devel-5.5.52-1.el7 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) mysql55-mysql-5.5.52-1.el6, mysql55-mysql-bench-5.5.52-1.el6, mysql55-mysql-devel-5.5.52-1.el6 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) mysql55-mysql-5.5.52-1.el7, mysql55-mysql-bench-5.5.52-1.el7, mysql55-mysql-devel-5.5.52-1.el7 +3
Fixes 9 records
Priority HIGH 79
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.6773 · Published 2016-09-20 · Partial fix CWE-264
Priority LOW 39
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.06816 · Published 2016-10-25 · Partial fix
Priority LOW 38
Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.04313 · Published 2016-12-13 · Partial fix CWE-362
Priority LOW 38
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0634 · Published 2016-10-25 · Partial fix
Priority LOW 37
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.05111 · Published 2016-10-25 · Partial fix
Priority LOW 36
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster befo…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.02966 · Published 2016-12-13 · Partial fix CWE-59
Priority LOW 35
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03714 · Published 2016-10-25 · Partial fix
Priority LOW 30
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.06976 · Published 2016-10-25 · Partial fix
Priority LOW 28
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.03316 · Published 2016-10-25 · Partial fix
THREATIST.IORead the docs