Bug 1019997 (CVE-2013-5807)

Summary:	CVE-2013-5807 mysql: unspecified flaw related to Replication (CPU October 2013)
Product:	[Other] Security Response	Reporter:	Vincent Danen <vdanen>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	Bjorn.Munch, byte, databases-maint, drieden, hhorak, jdornak, jkurik, jstanek, jtrowbri, mmaslano, nobody+bgollahe, pfrields, pgervase
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	mysql 5.6.14, mysql 5.5.34	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-02-24 05:06:35 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1020032, 1020033, 1020034, 1020036, 1055875, 1055876, 1055883, 1055884, 1056440, 1056457
Bug Blocks:	1019998

Description Vincent Danen 2013-10-16 18:25:35 UTC

Common Vulnerabilities and Exposures assigned an identifier CVE-2013-5807 to
the following vulnerability:

Name: CVE-2013-5807
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5807
Assigned: 20130918
Reference: http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32
and 5.6.x through 5.6.12 allows remote authenticated users to affect
confidentiality and integrity via unknown vectors related to
Replication.

Comment 2 Vincent Danen 2013-10-16 20:30:55 UTC

Created community-mysql tracking bugs for this issue:

Affects: fedora-19 [bug 1020033]

Comment 3 Vincent Danen 2013-10-16 20:32:33 UTC

Created mysql tracking bugs for this issue:

Affects: fedora-18 [bug 1020034]

Comment 4 Vincent Danen 2013-10-16 20:42:03 UTC

Created mariadb tracking bugs for this issue:

Affects: fedora-all [bug 1020036]

Comment 6 Fedora Update System 2013-11-02 04:51:49 UTC

community-mysql-5.5.34-1.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 7 Fedora Update System 2013-11-02 04:56:40 UTC

mysql-5.5.34-1.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 11 Fedora Update System 2013-11-10 07:48:00 UTC

community-mysql-5.5.34-1.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 18 errata-xmlrpc 2014-02-13 18:37:17 UTC

This issue has been addressed in following products:

  Red Hat Software Collections for RHEL-6

Via RHSA-2014:0173 https://rhn.redhat.com/errata/RHSA-2014-0173.html

Comment 19 errata-xmlrpc 2014-02-18 17:56:03 UTC

This issue has been addressed in following products:

  Red Hat Enterprise Linux 5

Via RHSA-2014:0186 https://rhn.redhat.com/errata/RHSA-2014-0186.html

Comment 20 errata-xmlrpc 2014-02-19 18:45:48 UTC

This issue has been addressed in following products:

  Red Hat Software Collections for RHEL-6

Via RHSA-2014:0189 https://rhn.redhat.com/errata/RHSA-2014-0189.html