Red Hat Security AdvisoryRHSA-2016:2595
mariadb security and bug fix update
Released 2016-11-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) mariadb-1:5.5.52-1.el7, mariadb-libs-1:5.5.52-1.el7, mariadb-server-1:5.5.52-1.el7
- Red Hat Enterprise Linux Client Optional (v. 7) mariadb-bench-1:5.5.52-1.el7, mariadb-devel-1:5.5.52-1.el7, mariadb-embedded-1:5.5.52-1.el7 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) mariadb-1:5.5.52-1.el7, mariadb-libs-1:5.5.52-1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) mariadb-bench-1:5.5.52-1.el7, mariadb-devel-1:5.5.52-1.el7, mariadb-embedded-1:5.5.52-1.el7 +3
- Red Hat Enterprise Linux Server (v. 7) mariadb-1:5.5.52-1.el7, mariadb-bench-1:5.5.52-1.el7, mariadb-devel-1:5.5.52-1.el7 +5
- Red Hat Enterprise Linux Server Optional (v. 7) mariadb-embedded-1:5.5.52-1.el7, mariadb-embedded-1:5.5.52-1.el7.ppc, mariadb-embedded-devel-1:5.5.52-1.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) mariadb-1:5.5.52-1.el7, mariadb-bench-1:5.5.52-1.el7, mariadb-devel-1:5.5.52-1.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) mariadb-embedded-1:5.5.52-1.el7, mariadb-embedded-devel-1:5.5.52-1.el7
Fixes 8 records
Priority HIGH 79
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.6773 · Published 2016-09-20 · Partial fix CWE-264
Priority LOW 39
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.06816 · Published 2016-10-25 · Partial fix
Priority LOW 38
Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.04313 · Published 2016-12-13 · Partial fix CWE-362
Priority LOW 38
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0634 · Published 2016-10-25 · Partial fix
Priority LOW 37
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.05111 · Published 2016-10-25 · Partial fix
Priority LOW 35
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03714 · Published 2016-10-25 · Partial fix
Priority LOW 30
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.06976 · Published 2016-10-25 · Partial fix
Priority LOW 28
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.03316 · Published 2016-10-25 · Partial fix
THREATIST.IORead the docs