Red Hat Security Advisory: rh-mysql56-mysql security update
🔗 CVE IDs covered (50)
📋 Description
CVE-2015-4792 — mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) CVE-2015-4800 — mysql: unspecified vulnerability related to Server:Optimizer (CPU October 2015) CVE-2015-4802 — mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) CVE-2015-4815 — mysql: unspecified vulnerability related to Server:DDL (CPU October 2015) CVE-2015-4826 — mysql: unspecified vulnerability related to Server:Types (CPU October 2015) CVE-2015-4830 — mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015) CVE-2015-4836 — mysql: unspecified vulnerability related to Server:SP (CPU October 2015) CVE-2015-4858 — mysql: unspecified vulnerability related to Server:DML (CPU October 2015) CVE-2015-4861 — mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) CVE-2015-4862 — mysql: unspecified vulnerability related to Server:DML (CPU October 2015) CVE-2015-4870 — mysql: unspecified vulnerability related to Server:Parser (CPU October 2015) CVE-2015-4890 — mysql: unspecified vulnerability related to Server:Replication (CPU October 2015) CVE-2015-4910 — mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015) CVE-2015-4913 — mysql: unspecified vulnerability related to Server:DML (CPU October 2015) CVE-2016-0503 — mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) CVE-2016-0504 — mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) CVE-2016-0505 — mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016) CVE-2016-0546 — mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016) CVE-2016-0595 — mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) CVE-2016-0596 — mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) CVE-2016-0597 — mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016) CVE-2016-0598 — mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) CVE-2016-0600 — mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016) CVE-2016-0605 — mysql: unspecified vulnerability in subcomponent: Server: General (CPU January 2016) CVE-2016-0606 — mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU January 2016) CVE-2016-0607 — mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU January 2016) CVE-2016-0608 — mysql: unspecified vulnerability in subcomponent: Server: UDF (CPU January 2016) CVE-2016-0609 — mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU January 2016) CVE-2016-0610 — mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016) CVE-2016-0611 — mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016) CVE-2016-0639 — mysql: unspecified vulnerability in subcomponent: Server: Pluggable Authentication (CPU April 2016) CVE-2016-0640 — mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016) CVE-2016-0641 — mysql: unspecified vulnerability in subcomponent: Server: MyISAM (CPU April 2016) CVE-2016-0642 — mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016) CVE-2016-0643 — mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016) CVE-2016-0644 — mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016) CVE-2016-0646 — mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016) CVE-2016-0647 — mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016) CVE-2016-0648 — mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016) CVE-2016-0649 — mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016) CVE-2016-0650 — mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU April 2016) CVE-2016-0655 — mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016) CVE-2016-0661 — mysql: unspecified vulnerability in subcomponent: Server: Options (CPU April 2016) CVE-2016-0665 — mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU April 2016) CVE-2016-0666 — mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU April 2016) CVE-2016-0668 — mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016) CVE-2016-2047 — mysql: ssl-validate-cert incorrect hostname check CVE-2016-3452 — mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016) CVE-2016-3471 — mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016) CVE-2016-5444 — mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)
🎯 Affected products88
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-mysql56-mysql-0:5.6.30-1.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
- rh-mysql56-mysql-0:5.6.30-1.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
- rh-mysql56-mysql-0:5.6.30-1.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
- rh-mysql56-mysql-0:5.6.30-1.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
- rh-mysql56-mysql-0:5.6.30-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
- rh-mysql56-mysql-0:5.6.30-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
- rh-mysql56-mysql-0:5.6.30-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
- rh-mysql56-mysql-0:5.6.30-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
- rh-mysql56-mysql-0:5.6.30-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-mysql56-mysql-0:5.6.30-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-mysql56-mysql-0:5.6.30-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-mysql56-mysql-0:5.6.30-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-mysql56-mysql-0:5.6.30-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-mysql56-mysql-0:5.6.30-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- rh-mysql56-mysql-0:5.6.30-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2)
- rh-mysql56-mysql-0:5.6.30-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
- rh-mysql56-mysql-bench-0:5.6.30-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)
- rh-mysql56-mysql-bench-0:5.6.30-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6)
- rh-mysql56-mysql-bench-0:5.6.30-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)
- rh-mysql56-mysql-bench-0:5.6.30-1.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)
- rh-mysql56-mysql-bench-0:5.6.30-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
- rh-mysql56-mysql-bench-0:5.6.30-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1)
- +58 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the MySQL server daemon (mysqld) will be restarted automatically.
🔗 References (57)
- selfhttps://access.redhat.com/errata/RHSA-2016:0705
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixMSQL
- externalhttp://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixMSQL
- externalhttp://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html#AppendixMSQL
- externalhttps://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
- externalhttps://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
- externalhttps://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
- externalhttps://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274752
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274754
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274756
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274759
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274766
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274767
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274771
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274773
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274776
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274778
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274781
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274785
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274792
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274794
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301490
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301491
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301492
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301493
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301495
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301496
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301497
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301498
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301501
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301503
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301504
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301505
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301506
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301507
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301508
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301509
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1301874
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329238
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329239
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329241
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329243
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329245
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329247
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329248
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329249
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329251
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329252
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329253
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329259
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329266
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329269
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329270
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1329273
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0705.json