Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mecab | 0:0.996-2.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mecab-debuginfo | 0:0.996-2.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mecab-debugsource | 0:0.996-2.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mecab-devel | 0:0.996-2.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mecab-ipadic | 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mecab-ipadic-EUCJP | 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-common | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-debuginfo | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-debugsource | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-devel | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-devel-debuginfo | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-errmsg | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-libs | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-libs-debuginfo | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-server | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-server-debuginfo | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-test | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mysql-test-debuginfo | 0:8.0.41-1.module+el8.10.0+22857+7f331edd |
Vulnerabilities 49
-
Critical 9.1
In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handlin…
-
Critical 9.1CVE-2024-5535 Public exploit
SSL_select_next_proto buffer overread
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences suc…
-
High 7.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that …
-
Medium 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are af…
-
Medium 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe…
-
Medium 6.3CVE-2024-7264 EPSS 20%
ASN.1 date parser overread
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting per…
-
Medium 5.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 5.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 5.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 5.4
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…
-
Medium 5.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that …
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions …
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Performance Schema). Supported versions t…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are a…
-
Medium 4.4
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Health Monitor). Supported versions that …
-
Medium 4.4
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…
-
Medium 4.2
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…
-
Low 3.8
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a…
-
Low 3.8
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…
-
Low 3.4
netrc and redirect credential leak
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that …
-
Low 3.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are aff…
-
Low 2.2
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). Supported version…
-
Low 1.8
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are aff…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2294581
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2294676
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2301888
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318857
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318858
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318870
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318873
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318874
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318876
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318882
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318883
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318884
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318885
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318886
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318897
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318900
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318905
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318914
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318922
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318923
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318925
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318926
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318927
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2331191
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339218
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339220
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339221
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339226
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339231
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339236
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339238
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339243
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339247
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339252
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339259
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339266
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339270
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339271