RHSA-2016:0534 — Red Hat Security Advisory: mariadb security and bug fix update

Fixed packages 36

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-bench	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-debuginfo	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-devel	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-embedded	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-embedded-devel	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-libs	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-server	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-test	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-bench	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-debuginfo	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-devel	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-embedded	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-embedded-devel	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-libs	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-server	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-test	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-bench	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-debuginfo	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-devel	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-embedded	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-embedded-devel	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-libs	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-server	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-test	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-bench	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-debuginfo	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-devel	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-embedded	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-embedded-devel	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-libs	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-server	1:5.5.47-1.el7_2
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-test	1:5.5.47-1.el7_2

Vulnerabilities 27

Unscored —

CVE-2015-4792

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4802

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4815

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4816

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availab…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4819

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affe…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4826

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4830

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4836

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4858

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4861

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4870 Public exploit EPSS 30%

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4879

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticate…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2015-4913

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu

Oct 21, 2015
Unscored —

CVE-2016-0505

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0546

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0596

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x b…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0597

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0598

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0600

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0606

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0608

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0609

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0616

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu

Jan 21, 2016
Unscored —

CVE-2016-0642

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local u…

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu

Apr 21, 2016
Unscored —

CVE-2016-0651

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors rela…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-5.5 Ubuntu

Apr 21, 2016
Unscored —

CVE-2016-2047

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x …

percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu

Jan 27, 2016
Unscored —

CVE-2016-3471

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confid…

percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-5.5 Ubuntu

Jul 21, 2016

References

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://mariadb.com/kb/en/mariadb/mariadb-5545-release-notes/
article
https://mariadb.com/kb/en/mariadb/mariadb-5546-release-notes/
article
https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/
article
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
article
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274752
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274756
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274759
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274761
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274764
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274766
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274767
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274771
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274773
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274776
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274781
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274783
report
https://bugzilla.redhat.com/show_bug.cgi?id=1274794
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301492
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301493
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301496
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301497
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301498
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301501
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301504
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301506
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301507
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301510
report
https://bugzilla.redhat.com/show_bug.cgi?id=1301874
report
https://bugzilla.redhat.com/show_bug.cgi?id=1303946
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0534.json
report
https://access.redhat.com/security/cve/CVE-2015-4792
advisory
https://www.cve.org/CVERecord?id=CVE-2015-4792
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-4792
report
https://access.redhat.com/security/cve/CVE-2015-4802
advisory
https://www.cve.org/CVERecord?id=CVE-2015-4802
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-4802
report
https://access.redhat.com/security/cve/CVE-2015-4815

Red Hat Security Advisory: mariadb security and bug fix update

Fixed packages 36

Vulnerabilities 27

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availab…

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affe…

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticate…

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x b…

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1…

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local u…

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors rela…

The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x …

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confid…

References