Red Hat Security Advisory: mariadb55-mariadb security update

Fixed packages 14

Vulnerabilities 10

• Unscored —
  CVE-2016-3492

  Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-5483 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2…

  Apr 25, 2017
• Unscored —
  CVE-2016-5612

  Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-5616 Public exploit Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2…

  mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-5624

  Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability v…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-5626

  Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-5629

  Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-6662 Public exploit EPSS 68%

  Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  Sep 20, 2016
• Unscored —
  CVE-2016-6663 Public exploit

  Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB b…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Dec 13, 2016
• Unscored —
  CVE-2016-8283

  Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html#AppendixMSQL
• article
  https://mariadb.com/kb/en/mariadb/mariadb-5551-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-5553-release-notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375198
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1378936
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386554
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386561
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386562
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386566
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386568
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386572
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386585
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2131.json
• report
  https://access.redhat.com/security/cve/CVE-2016-3492
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-3492
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-3492
• article
  http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881724.html#AppendixMSQL
• report
  https://access.redhat.com/security/cve/CVE-2016-5483
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1433010
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5483
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5483
• article
  https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/
• article
  https://blog.tarq.io/cve-2016-5483-galera-remote-command-execution-via-crafted-database-name/
• report
  https://access.redhat.com/security/cve/CVE-2016-5612
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5612
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5612
• report
  https://access.redhat.com/security/cve/CVE-2016-5616
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5616
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5616
• article
  https://legalhackers.com/advisories/MySQL-Maria-Percona-PrivEscRace-CVE-2016-6663-5616-Exploit.txt
• report
  https://access.redhat.com/security/cve/CVE-2016-5624
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5624
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5624
• report
  https://access.redhat.com/security/cve/CVE-2016-5626
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5626
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5626
• report
  https://access.redhat.com/security/cve/CVE-2016-5629