Red Hat Security AdvisoryRHSA-2017:3265
rh-mysql56-mysql security update
Released 2017-11-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mysql56-mysql-5.6.38-1.el6, rh-mysql56-mysql-bench-5.6.38-1.el6, rh-mysql56-mysql-common-5.6.38-1.el6 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mysql56-mysql-5.6.38-1.el7, rh-mysql56-mysql-bench-5.6.38-1.el7, rh-mysql56-mysql-common-5.6.38-1.el7 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-mysql56-mysql-5.6.38-1.el6, rh-mysql56-mysql-bench-5.6.38-1.el6, rh-mysql56-mysql-common-5.6.38-1.el6 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-mysql56-mysql-5.6.38-1.el7, rh-mysql56-mysql-bench-5.6.38-1.el7, rh-mysql56-mysql-common-5.6.38-1.el7 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-mysql56-mysql-5.6.38-1.el7, rh-mysql56-mysql-bench-5.6.38-1.el7, rh-mysql56-mysql-common-5.6.38-1.el7 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mysql56-mysql-5.6.38-1.el6, rh-mysql56-mysql-bench-5.6.38-1.el6, rh-mysql56-mysql-common-5.6.38-1.el6 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mysql56-mysql-5.6.38-1.el7, rh-mysql56-mysql-bench-5.6.38-1.el7, rh-mysql56-mysql-common-5.6.38-1.el7 +5
Fixes 12 records
Priority MEDIUM 46
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth).
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04291 · Published 2017-10-19 · Fixed
Priority LOW 35
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03264 · Published 2017-10-19 · Partial fix
Priority LOW 35
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0372 · Published 2017-10-19 · Fixed
Priority LOW 34
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03103 · Published 2017-10-19 · Partial fix
Priority LOW 33
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02298 · Published 2017-10-19 · Partial fix CWE-863
Priority LOW 29
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema).
CVSS 3.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.02351 · Published 2017-10-19 · Fixed
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02805 · Published 2017-10-19 · Fixed
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02853 · Published 2017-10-19 · Fixed
Priority LOW 28
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.02829 · Published 2017-10-19 · Fixed
Priority LOW 26
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01563 · Published 2017-10-19 · Fixed
Priority LOW 25
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB).
CVSS 3.1MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.02444 · Published 2017-10-19 · Fixed
Priority LOW 20
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).
CVSS 3.1MEDIUM 4.1· Local · High privileges · No interaction · EPSS 0.00702 · Published 2017-10-19 · Partial fix
THREATIST.IORead the docs