Red Hat Security Advisory: rh-mysql56-mysql security and bug fix update

Fixed packages 18

Vulnerabilities 37

• Unscored —
  CVE-2016-5483 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2…

  Apr 25, 2017
• Unscored —
  CVE-2016-8327

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3238

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3244

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3257

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3258

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3265

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3273

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3291

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3302

  Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x thro…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Feb 12, 2017
• Unscored —
  CVE-2017-3305

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3308

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3309

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3312

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3313

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3317

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affect…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3318

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3450

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3452

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server
  Apr 24, 2017
• Unscored —
  CVE-2017-3453

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3456

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3461

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3462

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3463

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3464

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3599 Public exploit EPSS 90%

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3600

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3633

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that …

  Oracle MySQL Server Communications Policy Management percona-server-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3634

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3636

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that ar…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Aug 8, 2017
• Unscored —
  CVE-2017-3641

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Aug 8, 2017
• Unscored —
  CVE-2017-3647

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3648

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3649

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3651

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3652

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3653

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Aug 8, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL
• article
  http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL
• article
  http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL
• article
  https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
• article
  https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
• article
  https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414133
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414337
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414338
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414342
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414350
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414351
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414352
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414357
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414423
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414429
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1422119
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1431690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1433010
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443359
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443363
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443365
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443369
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443376
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443377
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443378
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443379
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443386
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472683
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472684
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472686
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472693
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472703
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472704