RHEL 5 : mysql55-mysql (RHSA-2015:1628)

High Nessus Plugin ID 85443

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

Updated mysql55-mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages, listed in the References section. (CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-4737, CVE-2015-4752, CVE-2015-4757)

These updated packages upgrade MySQL to version 5.5.45. Refer to the MySQL Release Notes listed in the References section for a complete list of changes.

All MySQL users should upgrade to these updated packages, which correct these issues. After installing this update, the MySQL server daemon (mysqld) will be restarted automatically.

Solution

Update the affected packages.

See Also

http://www.nessus.org/u?df55894d

http://www.nessus.org/u?ef68d9ef

http://www.nessus.org/u?73eb3b44

https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-45.html

https://access.redhat.com/errata/RHSA-2015:1628

https://access.redhat.com/security/cve/cve-2015-0374

https://access.redhat.com/security/cve/cve-2015-0411

https://access.redhat.com/security/cve/cve-2015-0382

https://access.redhat.com/security/cve/cve-2015-0391

https://access.redhat.com/security/cve/cve-2015-0432

https://access.redhat.com/security/cve/cve-2014-6568

https://access.redhat.com/security/cve/cve-2015-0381

https://access.redhat.com/security/cve/cve-2015-0505

https://access.redhat.com/security/cve/cve-2015-2571

https://access.redhat.com/security/cve/cve-2015-2573

https://access.redhat.com/security/cve/cve-2015-0501

https://access.redhat.com/security/cve/cve-2015-2582

https://access.redhat.com/security/cve/cve-2015-4752

https://access.redhat.com/security/cve/cve-2015-2620

https://access.redhat.com/security/cve/cve-2015-2568

https://access.redhat.com/security/cve/cve-2015-0433

https://access.redhat.com/security/cve/cve-2015-4757

https://access.redhat.com/security/cve/cve-2015-4737

https://access.redhat.com/security/cve/cve-2015-2648

https://access.redhat.com/security/cve/cve-2015-0499

https://access.redhat.com/security/cve/cve-2015-0441

https://access.redhat.com/security/cve/cve-2015-2643

https://access.redhat.com/security/cve/cve-2015-4816

https://access.redhat.com/security/cve/cve-2015-4819

https://access.redhat.com/security/cve/cve-2015-4864

https://access.redhat.com/security/cve/cve-2015-4879

Plugin Details

Severity: High

ID: 85443

File Name: redhat-RHSA-2015-1628.nasl

Version: 2.10

Type: local

Agent: unix

Published: 2015/08/17

Updated: 2018/11/10

Dependencies: 12634

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:mysql55-mysql, p-cpe:/a:redhat:enterprise_linux:mysql55-mysql-bench, p-cpe:/a:redhat:enterprise_linux:mysql55-mysql-debuginfo, p-cpe:/a:redhat:enterprise_linux:mysql55-mysql-devel, p-cpe:/a:redhat:enterprise_linux:mysql55-mysql-libs, p-cpe:/a:redhat:enterprise_linux:mysql55-mysql-server, p-cpe:/a:redhat:enterprise_linux:mysql55-mysql-test, cpe:/o:redhat:enterprise_linux:5

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2015/08/17

Reference Information

CVE: CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-4737, CVE-2015-4752, CVE-2015-4757, CVE-2015-4816, CVE-2015-4819, CVE-2015-4864, CVE-2015-4879

RHSA: 2015:1628