This mysql update to verson 5.5.52 fixes the following issues:
Security issues fixed :

  - CVE-2016-3477: Fixed unspecified vulnerability in     subcomponent parser (bsc#989913).

  - CVE-2016-3521: Fixed unspecified vulnerability in     subcomponent types (bsc#989919).

  - CVE-2016-3615: Fixed unspecified vulnerability in     subcomponent dml (bsc#989922).

  - CVE-2016-5440: Fixed unspecified vulnerability in     subcomponent rbr (bsc#989926).

  - CVE-2016-6662: A malicious user with SQL and filesystem     access could create a my.cnf in the datadir and , under     certain circumstances, execute arbitrary code as mysql     (or even root) user. (bsc#998309) More details can be     found on:
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-     52.html     http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-     51.html     http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-     50.html Bugs fixed :

  - bsc#967374: properly restart mysql multi instances     during upgrade

  - bnc#937258: multi script to restart after crash

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several issues have been discovered in the MariaDB database server.
The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.26. Please see the MariaDB 10.0 Release Notes for further details :

  -     https://mariadb.com/kb/en/mariadb/mariadb-10026-release-     notes/

An update for mariadb is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a newer upstream version:
mariadb (5.5.50).

Security Fix(es) :

* This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages, listed in the References section. (CVE-2016-0640, CVE-2016-0641, CVE-2016-0643, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0666, CVE-2016-3452, CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440, CVE-2016-5444)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-615:02 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. MySQL is a     client/server implementation consisting of a server daemon (mysqld)     and many different client programs and libraries. The base package     contains the standard MySQL client programs and generic MySQL files.
    Security issues fixed with this release:
    CVE-2016-3459     Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and     5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before     10.1.14 allows remote administrators to affect availability via     vectors related to Server: InnoDB.
    CVE-2016-3477     Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30     and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x     before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect     confidentiality, integrity, and availability via vectors related to     Server: Parser.
    CVE-2016-3486     Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and     5.7.12 and earlier allows remote authenticated users to affect     availability via vectors related to Server: FTS.
    CVE-2016-3501     Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and     5.7.12 and earlier allows remote authenticated users to affect     availability via vectors related to Server: Optimizer.
    CVE-2016-3521     Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30     and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x     before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated     users to affect availability via vectors related to Server: Types.
    CVE-2016-3614     Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and     5.7.12 and earlier allows remote authenticated users to affect     availability via vectors related to Server: Security: Encryption.
    CVE-2016-3615     Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30     and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x     before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated     users to affect availability via vectors related to Server: DML.
    CVE-2016-5439     Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and     5.7.12 and earlier allows remote administrators to affect availability     via vectors related to Server: Privileges.
    CVE-2016-5440     Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30     and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x     before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators     to affect availability via vectors related to Server: RBR.
    The following packages have been upgraded to a newer upstream version: rh-mysql56-mysql (5.6.32).

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
93615	SUSE SLES11 Security Update : mysql (SUSE-SU-2016:2343-1)	Nessus	SuSE Local Security Checks	9/21/2016	1/23/2026	critical
92588	Debian DSA-3632-1 : mariadb-10.0 - security update	Nessus	Debian Local Security Checks	7/28/2016	1/30/2026	high
92938	RHEL 7 : mariadb (RHSA-2016:1602)	Nessus	Red Hat Local Security Checks	8/12/2016	1/28/2026	high
290017	MiracleLinux 7 : rh-mysql56-mysql-5.6.32-1.el7 (AXSA:2016-615:02)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	high

Detections

Analytics

Plugins Search

critical

high

high

high