RHSA-2014:1862 — Red Hat Security Advisory: mariadb55-mariadb security update

Fixed packages 14

Release	Package	Fixed in
Red Hat · RHEL 1 rhel_software_collections:1::el6	mariadb55-mariadb	0:5.5.40-10.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6	mariadb55-mariadb-bench	0:5.5.40-10.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6	mariadb55-mariadb-debuginfo	0:5.5.40-10.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6	mariadb55-mariadb-devel	0:5.5.40-10.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6	mariadb55-mariadb-libs	0:5.5.40-10.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6	mariadb55-mariadb-server	0:5.5.40-10.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6	mariadb55-mariadb-test	0:5.5.40-10.el6
Red Hat · RHEL 1 rhel_software_collections:1::el7	mariadb55-mariadb	0:5.5.40-10.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7	mariadb55-mariadb-bench	0:5.5.40-10.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7	mariadb55-mariadb-debuginfo	0:5.5.40-10.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7	mariadb55-mariadb-devel	0:5.5.40-10.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7	mariadb55-mariadb-libs	0:5.5.40-10.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7	mariadb55-mariadb-server	0:5.5.40-10.el7
Red Hat · RHEL 1 rhel_software_collections:1::el7	mariadb55-mariadb-test	0:5.5.40-10.el7

Vulnerabilities 19

Unscored —

CVE-2012-5615 Public exploit EPSS 15%

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other ve…

mysql-5.5 mysql-5.6 Ubuntu

Dec 3, 2012
Unscored —

CVE-2014-2494

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated …

mysql-5.5 mariadb-5.5 Ubuntu

Jul 17, 2014
Unscored —

CVE-2014-4207

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated …

mysql-5.5 mariadb-5.5 Ubuntu

Jul 17, 2014
Unscored —

CVE-2014-4243

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allow…

mariadb-5.5 Ubuntu

Jul 17, 2014
Unscored —

CVE-2014-4258

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allow…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Jul 17, 2014
Unscored —

CVE-2014-4260

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, all…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Jul 17, 2014
Unscored —

CVE-2014-4274

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-4287

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated …

mysql-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6463

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated …

mysql-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6464

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6469

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6484

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

mysql-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6505

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

mysql-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6507

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticate…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6520

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availab…

mysql-5.5 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6530

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

mysql-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6551

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect…

mysql-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6555

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-6559

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to…

mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu

Oct 15, 2014

References

article
https://access.redhat.com/security/updates/classification/#important
article
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html#AppendixMSQL
article
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html#AppendixMSQL
article
https://mariadb.com/kb/en/mariadb/development/release-notes/mariadb-5540-release-notes/
report
https://bugzilla.redhat.com/show_bug.cgi?id=1120382
report
https://bugzilla.redhat.com/show_bug.cgi?id=1120383
report
https://bugzilla.redhat.com/show_bug.cgi?id=1120385
report
https://bugzilla.redhat.com/show_bug.cgi?id=1120387
report
https://bugzilla.redhat.com/show_bug.cgi?id=1120388
report
https://bugzilla.redhat.com/show_bug.cgi?id=1126271
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153461
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153462
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153463
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153464
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153467
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153489
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153490
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153491
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153493
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153494
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153495
report
https://bugzilla.redhat.com/show_bug.cgi?id=1153496
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1862.json
report
https://access.redhat.com/security/cve/CVE-2012-5615
report
https://bugzilla.redhat.com/show_bug.cgi?id=882608
advisory
https://www.cve.org/CVERecord?id=CVE-2012-5615
advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-5615
report
https://access.redhat.com/security/cve/CVE-2014-2494
advisory
https://www.cve.org/CVERecord?id=CVE-2014-2494
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-2494
report
https://access.redhat.com/security/cve/CVE-2014-4207
advisory
https://www.cve.org/CVERecord?id=CVE-2014-4207
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-4207
report
https://access.redhat.com/security/cve/CVE-2014-4243
advisory
https://www.cve.org/CVERecord?id=CVE-2014-4243
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-4243
report
https://access.redhat.com/security/cve/CVE-2014-4258
advisory
https://www.cve.org/CVERecord?id=CVE-2014-4258
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-4258

Red Hat Security Advisory: mariadb55-mariadb security update

Fixed packages 14

Vulnerabilities 19

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other ve…

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated …

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated …

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allow…

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allow…

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, all…

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect…

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticate…

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availab…

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect…

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to…

References