Red Hat Security Advisory: mariadb security and bug fix update

Fixed packages 36

Vulnerabilities 21

• Unscored —
  CVE-2016-5483 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2…

  Apr 25, 2017
• Unscored —
  CVE-2016-5617 Public exploit Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6664. Reason: This candidate is a reservation duplicate of CVE-2…

  mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-6664 Public exploit

  mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server bef…

  mysql-5.5 mariadb-10.0 mariadb Ubuntu Alpine
  Dec 13, 2016
• Unscored —
  CVE-2017-3238

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3243

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3244

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3258

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3265

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3291

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3302

  Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x thro…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Feb 12, 2017
• Unscored —
  CVE-2017-3308

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3309

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3312

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3313

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3317

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affect…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3318

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3453

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3456

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3464

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3600

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3651

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html
• article
  https://mariadb.com/kb/en/mariadb/mariadb-5553-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-5554-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-5555-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-5556-release-notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1027829
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1356897
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386564
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414133
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414338
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414340
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414342
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414351
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414357
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414423
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414429
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1422119
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1433010
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443359
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443365
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443369
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443379
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2192.json
• report
  https://access.redhat.com/security/cve/CVE-2016-5483
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5483
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5483
• article
  https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/
• article
  https://blog.tarq.io/cve-2016-5483-galera-remote-command-execution-via-crafted-database-name/
• report
  https://access.redhat.com/security/cve/CVE-2016-5617
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-5617
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-5617
• article
  https://legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.txt
• report
  https://access.redhat.com/security/cve/CVE-2016-6664
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-6664
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-6664