Summary
Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.5.55 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS,
Ubuntu 16.10 and Ubuntu 17.04 have been updated to MySQL 5.7.18.
In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.
Please see the following for more information:
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-55.html
http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html
http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | mysql-5.5 | 5.5.55-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | mysql-5.7 | 5.7.18-0ubuntu0.16.04.1 |
Vulnerabilities 24
-
Unscored —
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x thro…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are …
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Thread Pooling). Supported versions …
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is …
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that …
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions t…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are …
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported ver…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions …
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that a…
References
-
report
https://ubuntu.com/security/CVE-2017-3302
-
report
https://ubuntu.com/security/CVE-2017-3305
-
report
https://ubuntu.com/security/CVE-2017-3308
-
report
https://ubuntu.com/security/CVE-2017-3309
-
report
https://ubuntu.com/security/CVE-2017-3329
-
report
https://ubuntu.com/security/CVE-2017-3331
-
report
https://ubuntu.com/security/CVE-2017-3450
-
report
https://ubuntu.com/security/CVE-2017-3453
-
report
https://ubuntu.com/security/CVE-2017-3454
-
report
https://ubuntu.com/security/CVE-2017-3455
-
report
https://ubuntu.com/security/CVE-2017-3456
-
report
https://ubuntu.com/security/CVE-2017-3457
-
report
https://ubuntu.com/security/CVE-2017-3458
-
report
https://ubuntu.com/security/CVE-2017-3459
-
report
https://ubuntu.com/security/CVE-2017-3460
-
report
https://ubuntu.com/security/CVE-2017-3461
-
report
https://ubuntu.com/security/CVE-2017-3462
-
report
https://ubuntu.com/security/CVE-2017-3463
-
report
https://ubuntu.com/security/CVE-2017-3464
-
report
https://ubuntu.com/security/CVE-2017-3465
-
report
https://ubuntu.com/security/CVE-2017-3467
-
report
https://ubuntu.com/security/CVE-2017-3468
-
report
https://ubuntu.com/security/CVE-2017-3599
-
report
https://ubuntu.com/security/CVE-2017-3600