Red Hat Security Advisory: rh-mysql57-mysql security and bug fix update

Fixed packages 16

Vulnerabilities 58

• Unscored —
  CVE-2016-5483 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2…

  Apr 25, 2017
• Unscored —
  CVE-2016-8327

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3238

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3244

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3251

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3256

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3257

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3258

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3273

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3291

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3308

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3309

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3312

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3313

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3317

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affect…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3318

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3319

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3320

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 27, 2017
• Unscored —
  CVE-2017-3331

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3450

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3453

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3454

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3455

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3456

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3457

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3458

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3459

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3460

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions t…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3461

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3462

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3463

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3464

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3465

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3467

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3468

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3529

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3599 Public exploit EPSS 90%

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3600

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 24, 2017
• Unscored —
  CVE-2017-3633

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that …

  Oracle MySQL Server Communications Policy Management percona-server-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3634

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3637

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affec…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3638

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3639

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3640

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3641

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Aug 8, 2017
• Unscored —
  CVE-2017-3642

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3643

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3644

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3645

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3646

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported versions that are affec…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3647

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3648

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3649

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3650

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API). Supported versions that are affected…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3651

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3652

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Aug 8, 2017
• Unscored —
  CVE-2017-3653

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Aug 8, 2017
• Unscored —
  CVE-2019-2730

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jul 23, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL
• article
  http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL
• article
  http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL
• article
  https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html
• article
  https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html
• article
  https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-19.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414133
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414337
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414338
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414342
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414343
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414345
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414350
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414351
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414352
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414357
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414360
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414429
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1433010
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443359
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443362
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443363
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443365
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443366
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443368
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443369
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443371
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443372
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443374
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443375
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443376
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443377
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443378
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443379