Red Hat Security Advisory

RHSA-2018:1254

rh-mysql56-mysql security update

Released 2018-04-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-mysql56-mysql-5.6.40-1.el6, rh-mysql56-mysql-bench-5.6.40-1.el6, rh-mysql56-mysql-common-5.6.40-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-mysql56-mysql-5.6.40-1.el7, rh-mysql56-mysql-bench-5.6.40-1.el7, rh-mysql56-mysql-common-5.6.40-1.el7 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-mysql56-mysql-5.6.40-1.el6, rh-mysql56-mysql-bench-5.6.40-1.el6, rh-mysql56-mysql-common-5.6.40-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-mysql56-mysql-5.6.40-1.el7, rh-mysql56-mysql-bench-5.6.40-1.el7, rh-mysql56-mysql-common-5.6.40-1.el7 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-mysql56-mysql-5.6.40-1.el7, rh-mysql56-mysql-bench-5.6.40-1.el7, rh-mysql56-mysql-common-5.6.40-1.el7 +5
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-mysql56-mysql-5.6.40-1.el7, rh-mysql56-mysql-bench-5.6.40-1.el7, rh-mysql56-mysql-common-5.6.40-1.el7 +5
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-mysql56-mysql-5.6.40-1.el6, rh-mysql56-mysql-bench-5.6.40-1.el6, rh-mysql56-mysql-common-5.6.40-1.el6 +5
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-mysql56-mysql-5.6.40-1.el7, rh-mysql56-mysql-bench-5.6.40-1.el7, rh-mysql56-mysql-common-5.6.40-1.el7 +5

Fixes 15 records

TI-2018-02065 CVE-2018-2755 · GHSA-qfwc-cmfr-mqv2

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 37

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1HIGH 7.7 Local No auth User interaction EPSS 0.00849 Published 2018-04-19 Partial fix

TI-2018-02128 CVE-2018-2819 · GHSA-v34f-wr7v-83xp

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03176 Published 2018-04-19 Partial fix

TI-2018-02126 CVE-2018-2817 · GHSA-g7c5-cc45-397q

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03176 Published 2018-04-19 Partial fix

TI-2018-02114 CVE-2018-2805 · GHSA-72jj-7c5h-9pjv

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: GIS Extension).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: GIS Extension).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02558 Published 2018-04-19 Fixed

TI-2018-02093 CVE-2018-2784 · GHSA-8m2v-9736-x6w9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02995 Published 2018-04-19 Partial fix

TI-2018-02091 CVE-2018-2782 · GHSA-848q-653w-gw2r

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02995 Published 2018-04-19 Partial fix

TI-2018-02067 CVE-2018-2758 · GHSA-4hq4-w9mw-ff2r

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 34

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03119 Published 2018-04-19 Fixed

TI-2018-02070 CVE-2018-2761 · GHSA-3639-c3mm-hf33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.04016 Published 2018-04-19 Partial fix

TI-2018-02096 CVE-2018-2787 · GHSA-c8vh-37vm-4jj7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.02576 Published 2018-04-19 Partial fix

TI-2018-02127 CVE-2018-2818 · GHSA-g7jv-h96w-mq24

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges).

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.03479 Published 2018-04-19 Partial fix

TI-2018-02090 CVE-2018-2781 · GHSA-gffv-5f9p-845q

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.033 Published 2018-04-19 Partial fix

TI-2018-02075 CVE-2018-2766 · GHSA-hx7p-wjjj-fw2p

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03083 Published 2018-04-19 Partial fix

TI-2018-02080 CVE-2018-2771 · GHSA-5w5p-84h5-p49m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 27

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.03598 Published 2018-04-19 Partial fix

TI-2018-02122 CVE-2018-2813 · GHSA-9v4g-rvq8-4rmh

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02573 Published 2018-04-19 Partial fix

TI-2018-02082 CVE-2018-2773 · GHSA-j997-q495-mhm6

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client…

LOW 20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.0MEDIUM 4.1 Local High privileges No interaction EPSS 0.00489 Published 2018-04-19 Partial fix