Red Hat Security Advisory: rh-mariadb100-mariadb security update

Fixed packages 20

Vulnerabilities 25

• Unscored —
  CVE-2015-0499

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticate…

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Apr 16, 2015
• Unscored —
  CVE-2015-0501 EPSS 10%

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticate…

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Apr 16, 2015
• Unscored —
  CVE-2015-0505

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticate…

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Apr 16, 2015
• Unscored —
  CVE-2015-2571

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticate…

  mysql-5.5 mariadb-5.5 mysql-5.6 Ubuntu
  Apr 16, 2015
• Unscored —
  CVE-2015-2582

  Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated …

  percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2611

  Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2617

  Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect confide…

  percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2620

  Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated …

  percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2639

  Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect integri…

  percona-server-5.6 mariadb-10.0 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2641

  Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 mariadb-10.0 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2643

  Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated …

  percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2648

  Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated …

  percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-2661

  Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows local users to affect availability via unkno…

  percona-server-5.6 mariadb-10.0 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-3152 Public exploit

  Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use th…

  percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  May 16, 2016
• Unscored —
  CVE-2015-4737

  Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticate…

  percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4752

  Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated …

  percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4756

  Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 mariadb-10.0 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4757

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows remote authenticated …

  percona-server-5.6 mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4761

  Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 mariadb-10.0 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4767

  Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 mariadb-10.0 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4769

  Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 mariadb-10.0 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4771

  Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 mariadb-10.0 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4772

  Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 mariadb-10.0 mariadb-5.5 mysql-5.6 Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-4864

  Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4866

  Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu
  Oct 21, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixMSQL
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10020-release-notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1217506
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244768
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244769
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244770
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244771
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244772
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244773
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244774
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244775
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244776
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244778
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244779
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244780
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244782
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244784
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244785
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244786
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1244787
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1646.json
• report
  https://access.redhat.com/security/cve/CVE-2015-0499
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1212768
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-0499
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-0499
• article
  http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixMSQL
• report
  https://access.redhat.com/security/cve/CVE-2015-0501
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1212758
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-0501
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-0501
• report
  https://access.redhat.com/security/cve/CVE-2015-0505
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1212780
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-0505
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-0505
• report
  https://access.redhat.com/security/cve/CVE-2015-2571
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1212772
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-2571