Red Hat Security Advisory: rh-mysql56-mysql security update

Fixed packages 18

Vulnerabilities 10

• Unscored —
  CVE-2016-3492

  Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-5507

  Unspecified vulnerability in Oracle MySQL 5.6.32 and earlier and 5.7.14 and earlier allows remote administrators to aff…

  percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-5616 Public exploit Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2…

  mysql-5.5 mariadb-10.0 mariadb-5.5 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-5617 Public exploit Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6664. Reason: This candidate is a reservation duplicate of CVE-2…

  mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-5626

  Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-5629

  Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-6662 Public exploit EPSS 68%

  Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  Sep 20, 2016
• Unscored —
  CVE-2016-6663 Public exploit

  Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB b…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Dec 13, 2016
• Unscored —
  CVE-2016-6664 Public exploit

  mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server bef…

  mysql-5.5 mariadb-10.0 mariadb Ubuntu Alpine
  Dec 13, 2016
• Unscored —
  CVE-2016-8283

  Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html#AppendixMSQL
• article
  https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
• article
  https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375198
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1378936
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386554
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386556
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386564
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386568
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386572
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386585
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2749.json
• report
  https://access.redhat.com/security/cve/CVE-2016-3492
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-3492
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-3492
• article
  http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881724.html#AppendixMSQL
• report
  https://access.redhat.com/security/cve/CVE-2016-5507
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5507
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5507
• report
  https://access.redhat.com/security/cve/CVE-2016-5616
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5616
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5616
• article
  https://legalhackers.com/advisories/MySQL-Maria-Percona-PrivEscRace-CVE-2016-6663-5616-Exploit.txt
• report
  https://access.redhat.com/security/cve/CVE-2016-5617
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5617
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5617
• article
  https://legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.txt
• report
  https://access.redhat.com/security/cve/CVE-2016-5626
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5626
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5626
• report
  https://access.redhat.com/security/cve/CVE-2016-5629
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5629
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5629
• report
  https://access.redhat.com/security/cve/CVE-2016-6662
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-6662
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-6662
• article
  https://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.txt
• report
  https://access.redhat.com/security/cve/CVE-2016-6663