Red Hat Security Advisory: mariadb-galera security update

Fixed packages 4

Vulnerabilities 18

• Unscored —
  CVE-2012-5615 Public exploit EPSS 15%

  Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other ve…

  mysql-5.5 mysql-5.6 Ubuntu
  Dec 3, 2012
• Unscored —
  CVE-2014-2494

  Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated …

  mysql-5.5 mariadb-5.5 Ubuntu
  Jul 17, 2014
• Unscored —
  CVE-2014-4207

  Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated …

  mysql-5.5 mariadb-5.5 Ubuntu
  Jul 17, 2014
• Unscored —
  CVE-2014-4258

  Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allow…

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 17, 2014
• Unscored —
  CVE-2014-4260

  Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, all…

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 17, 2014
• Unscored —
  CVE-2014-4274

  Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect…

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-4287

  Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated …

  mysql-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6463

  Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated …

  mysql-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6464

  Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6469

  Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6484

  Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

  mysql-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6505

  Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

  mysql-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6507

  Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticate…

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6520

  Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availab…

  mysql-5.5 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6530

  Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

  mysql-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6551

  Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect…

  mysql-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6555

  Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated …

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014
• Unscored —
  CVE-2014-6559

  Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to…

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Oct 15, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html#AppendixMSQL
• article
  http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html#AppendixMSQL
• article
  https://mariadb.com/kb/en/mariadb/development/release-notes/mariadb-5540-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/development/release-notes/mariadb-5539-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/development/release-notes/mariadb-5538-release-notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=882608
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1120382
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1120383
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1120387
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1120388
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1126271
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153461
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153462
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153463
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153464
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153467
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153489
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153490
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153491
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153493
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153495
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153496
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1940.json
• report
  https://access.redhat.com/security/cve/CVE-2012-5615
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-5615
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-5615
• report
  https://access.redhat.com/security/cve/CVE-2014-2494
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-2494
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-2494
• report
  https://access.redhat.com/security/cve/CVE-2014-4207
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-4207
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-4207
• report
  https://access.redhat.com/security/cve/CVE-2014-4258
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-4258
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-4258
• report
  https://access.redhat.com/security/cve/CVE-2014-4260
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-4260