Red Hat Security Advisory: mariadb security and bug fix update
🔗 CVE IDs covered (27)
📋 Description
CVE-2015-4792 — mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) CVE-2015-4802 — mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) CVE-2015-4815 — mysql: unspecified vulnerability related to Server:DDL (CPU October 2015) CVE-2015-4816 — mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) CVE-2015-4819 — mysql: unspecified vulnerability related to Client programs (CPU October 2015) CVE-2015-4826 — mysql: unspecified vulnerability related to Server:Types (CPU October 2015) CVE-2015-4830 — mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015) CVE-2015-4836 — mysql: unspecified vulnerability related to Server:SP (CPU October 2015) CVE-2015-4858 — mysql: unspecified vulnerability related to Server:DML (CPU October 2015) CVE-2015-4861 — mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) CVE-2015-4870 — mysql: unspecified vulnerability related to Server:Parser (CPU October 2015) CVE-2015-4879 — mysql: unspecified vulnerability related to Server:DML (CPU October 2015) CVE-2015-4913 — mysql: unspecified vulnerability related to Server:DML (CPU October 2015) CVE-2016-0505 — mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016) CVE-2016-0546 — mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016) CVE-2016-0596 — mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) CVE-2016-0597 — mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016) CVE-2016-0598 — mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) CVE-2016-0600 — mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016) CVE-2016-0606 — mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU January 2016) CVE-2016-0608 — mysql: unspecified vulnerability in subcomponent: Server: UDF (CPU January 2016) CVE-2016-0609 — mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU January 2016) CVE-2016-0616 — mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016) CVE-2016-0642 — mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016) CVE-2016-0651 — mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016) CVE-2016-2047 — mysql: ssl-validate-cert incorrect hostname check CVE-2016-3471 — mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)
🎯 Affected products118
- Red Hat Enterprise Linux Client (v. 7)
- Red Hat Enterprise Linux Client Optional (v. 7)
- Red Hat Enterprise Linux ComputeNode (v. 7)
- Red Hat Enterprise Linux ComputeNode Optional (v. 7)
- Red Hat Enterprise Linux Server (v. 7)
- Red Hat Enterprise Linux Server Optional (v. 7)
- Red Hat Enterprise Linux Workstation (v. 7)
- Red Hat Enterprise Linux Workstation Optional (v. 7)
- mariadb-1:5.5.47-1.el7_2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
- mariadb-1:5.5.47-1.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
- mariadb-1:5.5.47-1.el7_2.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
- mariadb-1:5.5.47-1.el7_2.src as a component of Red Hat Enterprise Linux Client (v. 7)
- mariadb-1:5.5.47-1.el7_2.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
- mariadb-1:5.5.47-1.el7_2.src as a component of Red Hat Enterprise Linux Server (v. 7)
- mariadb-1:5.5.47-1.el7_2.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
- mariadb-1:5.5.47-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
- mariadb-1:5.5.47-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
- mariadb-1:5.5.47-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
- mariadb-1:5.5.47-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
- mariadb-bench-1:5.5.47-1.el7_2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
- mariadb-bench-1:5.5.47-1.el7_2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
- mariadb-bench-1:5.5.47-1.el7_2.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
- mariadb-bench-1:5.5.47-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)
- mariadb-bench-1:5.5.47-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
- mariadb-bench-1:5.5.47-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
- mariadb-bench-1:5.5.47-1.el7_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
- mariadb-debuginfo-1:5.5.47-1.el7_2.i686 as a component of Red Hat Enterprise Linux Client (v. 7)
- mariadb-debuginfo-1:5.5.47-1.el7_2.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)
- mariadb-debuginfo-1:5.5.47-1.el7_2.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
- mariadb-debuginfo-1:5.5.47-1.el7_2.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
- +88 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically.
🔗 References (33)
- selfhttps://access.redhat.com/errata/RHSA-2016:0534
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://mariadb.com/kb/en/mariadb/mariadb-5545-release-notes/
- externalhttps://mariadb.com/kb/en/mariadb/mariadb-5546-release-notes/
- externalhttps://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/
- externalhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
- externalhttp://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274752
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274756
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274759
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274761
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274764
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274766
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274767
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274771
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274773
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274776
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274781
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274783
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274794
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301492
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301493
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301496
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301497
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301498
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301501
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301504
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301506
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301507
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301510
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301874
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1303946
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0534.json