Bug 1184560 – CVE-2015-0411 mysql: unspecified vulnerability related to Server:Security:Encryption (CPU Jan 2015)

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 1184560 - (CVE-2015-0411) CVE-2015-0411 mysql: unspecified vulnerability related to Server:Security:Encryption (CPU Jan 2015)

Summary:	CVE-2015-0411 mysql: unspecified vulnerability related to Server:Security:Enc...

Status:	NEW

Aliases:	CVE-2015-0411

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=moderate,public=20150121,repor...
Keywords:	Security

Depends On:	1186109 1186110 1186113 1186114 1186115 1186116 1247020
Blocks:	1184564
	Show dependency tree / graph

Reported:	2015-01-21 11:40 EST by Martin Prpič
Modified:	2018-01-30 18:47 EST (History)
CC List:	23 users (show)

See Also:
Fixed In Version:	mysql 5.5.41, mysql 5.6.22, mariadb 5.5.41, mariadb 10.0.16
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
mysql-5.5.41 yassl patch (1.65 KB, patch) 2015-01-22 04:06 EST, Huzaifa S. Sidhpurwala	no flags	Details \| Diff
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2015:0116	normal	SHIPPED_LIVE	Moderate: mysql55-mysql security update	2015-02-03 17:09:52 EST
Red Hat Product Errata	RHSA-2015:0117	normal	SHIPPED_LIVE	Moderate: mariadb55-mariadb security update	2015-02-03 17:09:12 EST
Red Hat Product Errata	RHSA-2015:0118	normal	SHIPPED_LIVE	Moderate: mariadb security update	2015-02-03 18:04:53 EST
Red Hat Product Errata	RHSA-2015:1628	normal	SHIPPED_LIVE	Moderate: mysql55-mysql security update	2015-08-17 05:44:14 EDT

Groups: None (edit)

Description Martin Prpič 2015-01-21 11:40:27 EST

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Encryption). Supported versions that are affected are 5.5.40 and earlier and 5.6.21 and earlier. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some MySQL Server accessible data as well as read access to a subset of MySQL Server accessible data and ability to cause a partial denial of service (partial DOS) of MySQL Server.

External References:

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixMSQL

Comment 1 Huzaifa S. Sidhpurwala 2015-01-22 04:06:24 EST

Created attachment 982642 [details]
mysql-5.5.41 yassl patch

Comment 2 Tomas Hoger 2015-01-22 04:12:29 EST

(In reply to Huzaifa S. Sidhpurwala from comment #1)
> mysql-5.5.41 yassl patch

Upstream commit:
http://bazaar.launchpad.net/~mysql/mysql-server/5.5/revision/4720

Comment 6 errata-xmlrpc 2015-02-03 12:11:09 EST

This issue has been addressed in the following products:

  Red Hat Software Collections 1 for Red Hat Enterprise Linux 7
  Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS
  Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS
  Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS
  Red Hat Software Collections 1 for Red Hat Enterprise Linux 6

Via RHSA-2015:0117 https://rhn.redhat.com/errata/RHSA-2015-0117.html

Comment 7 errata-xmlrpc 2015-02-03 12:11:52 EST

This issue has been addressed in the following products:

  Red Hat Software Collections 1 for Red Hat Enterprise Linux 7
  Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.5 EUS
  Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.4 EUS
  Red Hat Software Collections 1 for Red Hat Enterprise Linux 6.6 EUS
  Red Hat Software Collections 1 for Red Hat Enterprise Linux 6

Via RHSA-2015:0116 https://rhn.redhat.com/errata/RHSA-2015-0116.html

Comment 8 errata-xmlrpc 2015-02-03 13:06:21 EST

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2015:0118 https://rhn.redhat.com/errata/RHSA-2015-0118.html

Comment 9 William Yardley 2015-02-05 22:38:33 EST

Is an update for EL5 coming?

Comment 10 errata-xmlrpc 2015-08-17 01:45:02 EDT

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 5

Via RHSA-2015:1628 https://rhn.redhat.com/errata/RHSA-2015-1628.html

Note You need to log in before you can comment on or make changes to this bug.

abaron
apevec
asaji
ayoung
byte
chrisw
dallan
databases-maint
gkotton
hhorak
jorton
jstanek
lhh
lpeer
markmc
mmaslano
mmuzila
rbryant
rohara
sardella
sclewis
srevivo
wby+redhat