Red Hat Security Advisory: rh-mariadb100-mariadb security update

Fixed packages 20

Vulnerabilities 58

• Unscored —
  CVE-2015-3210

  Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code …

  pcre3 Debian
  Dec 13, 2016
• Unscored —
  CVE-2015-3217

  PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to ca…

  pcre3 Debian
  Dec 13, 2016
• Unscored —
  CVE-2015-4792

  Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4802

  Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4815

  Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4816

  Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4819

  Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affe…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4826

  Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4830

  Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4836

  Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4858

  Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4861

  Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4870 Public exploit EPSS 30%

  Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4879

  Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows remote authenticate…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4895

  Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availab…

  percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb-5.5 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-4913

  Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 21, 2015
• Unscored —
  CVE-2015-5073

  Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attacke…

  pcre3 pcre3 Debian Ubuntu
  Dec 13, 2016
• Unscored —
  CVE-2015-8381

  The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles t…

  pcre3 Debian
  Dec 2, 2015
• Unscored —
  CVE-2015-8383

  PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of ser…

  pcre3 Debian
  Dec 2, 2015
• Unscored —
  CVE-2015-8384

  PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back refere…

  pcre3 Debian
  Dec 2, 2015
• Unscored —
  CVE-2015-8385

  PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, wh…

  pcre3 pcre3 Debian Ubuntu
  Dec 2, 2015
• Unscored —
  CVE-2015-8386

  PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows r…

  pcre3 pcre3 Debian Ubuntu
  Dec 2, 2015
• Unscored —
  CVE-2015-8388

  PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing paren…

  pcre3 pcre3 Debian Ubuntu
  Dec 2, 2015
• Unscored —
  CVE-2015-8391

  The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote atta…

  pcre3 pcre3 Debian Ubuntu
  Dec 2, 2015
• Unscored —
  CVE-2015-8392

  PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of …

  pcre3 Debian
  Dec 2, 2015
• Unscored —
  CVE-2015-8395

  PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly …

  pcre3 Debian
  Dec 2, 2015
• Unscored —
  CVE-2016-0505

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0546

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0596

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x b…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0597

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0598

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0600

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0606

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0608

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0609

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0610

  Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows…

  percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-5.5 mysql-5.6 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0616

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-5.5 Ubuntu
  Jan 21, 2016
• Unscored —
  CVE-2016-0640

  Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Apr 21, 2016
• Unscored —
  CVE-2016-0641

  Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Apr 21, 2016
• Unscored —
  CVE-2016-0642

  Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local u…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu
  Apr 21, 2016
• Unscored —
  CVE-2016-0643

  Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  Apr 21, 2016
• Unscored —
  CVE-2016-0644

  Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Apr 21, 2016
• Unscored —
  CVE-2016-0646

  Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Apr 21, 2016
• Unscored —
  CVE-2016-0647

  Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  Apr 21, 2016
• Unscored —
  CVE-2016-0648

  Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  Apr 21, 2016
• Unscored —
  CVE-2016-0649

  Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Apr 21, 2016
• Unscored —
  CVE-2016-0650

  Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Apr 21, 2016
• Unscored —
  CVE-2016-0651

  Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors rela…

  percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-5.5 Ubuntu
  Apr 21, 2016
• Unscored —
  CVE-2016-0655

  Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 a…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.0 Ubuntu
  Apr 21, 2016
• Unscored —
  CVE-2016-0666

  Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  Apr 21, 2016
• Unscored —
  CVE-2016-0668

  Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 a…

  percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mysql-5.6 Ubuntu
  Apr 21, 2016
• Unscored —
  CVE-2016-1283

  The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((…

  php7 pcre3 php5 pcre Debian Alpine
  Jan 3, 2016
• Unscored —
  CVE-2016-2047

  The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu
  Jan 27, 2016
• Unscored —
  CVE-2016-3191

  The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishand…

  pcre3 pcre3 pcre2 pcre Debian Ubuntu Alpine
  Mar 17, 2016
• Unscored —
  CVE-2016-3452

  Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb Ubuntu Alpine
  Jul 21, 2016
• Unscored —
  CVE-2016-3459

  Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 a…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 mariadb-10.0 Ubuntu
  Jul 21, 2016
• Unscored —
  CVE-2016-3471

  Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confid…

  percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-5.5 Ubuntu
  Jul 21, 2016
• Unscored —
  CVE-2016-5444

  Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB be…

  percona-server-5.6 percona-xtradb-cluster-5.6 mariadb-10.0 mariadb Ubuntu Alpine
  Jul 21, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
• article
  http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL
• article
  http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixMSQL
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10021-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10022-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10023-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10024-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1228283
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1237223
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274752
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274756
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274759
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274761
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274764
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274766
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274767
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274771
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274773
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274776
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274783
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274786
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1274794
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287614
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287623
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287629
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287636
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287671
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1287711
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1295385
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1301492
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1301493
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1301496
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1301497
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1301498
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1301501