Red Hat Security Advisory: rh-mariadb101-mariadb and rh-mariadb101-galera security and bug fix update

Fixed packages 26

Vulnerabilities 27

• Unscored —
  CVE-2016-5617 Public exploit Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6664. Reason: This candidate is a reservation duplicate of CVE-2…

  mysql-5.5 mariadb-10.0 Ubuntu
  Oct 25, 2016
• Unscored —
  CVE-2016-6664 Public exploit

  mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server bef…

  mysql-5.5 mariadb-10.0 mariadb Ubuntu Alpine
  Dec 13, 2016
• Unscored —
  CVE-2017-10268

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Oct 19, 2017
• Unscored —
  CVE-2017-10286

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.7 Ubuntu
  Oct 19, 2017
• Unscored —
  CVE-2017-10378

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Oct 19, 2017
• Unscored —
  CVE-2017-10379

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that ar…

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu
  Oct 19, 2017
• Unscored —
  CVE-2017-10384

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Oct 19, 2017
• Unscored —
  CVE-2017-3238

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3243

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3244

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3257

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3258

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3265

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3291

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3302

  Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x thro…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Feb 12, 2017
• Unscored —
  CVE-2017-3308

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3309

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3312

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3313

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3317

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affect…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3318

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 27, 2017
• Unscored —
  CVE-2017-3453

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3456

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3464

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 24, 2017
• Unscored —
  CVE-2017-3636

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that ar…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Aug 8, 2017
• Unscored —
  CVE-2017-3641

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Aug 8, 2017
• Unscored —
  CVE-2017-3653

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Aug 8, 2017

References

• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1466473
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472686
• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixMSQL
• article
  http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMSQL
• article
  http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixMSQL
• article
  http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixMSQL
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10120-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10121-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10122-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10123-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10124-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10126-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10127-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10128-release-notes/
• article
  https://mariadb.com/kb/en/mariadb/mariadb-10129-release-notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1386564
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414133
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414338
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414340
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414342
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414350
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414351
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414357
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414423
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414429
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1422119
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443359
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443365
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443369
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443379
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472693
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1472711
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503656
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503669