[SECURITY] [DLA 1355-1] mysql-5.5 security update

2018-04-1917:29:05

lists.debian.org

4.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

15.9%

JSON

Package : mysql-5.5
Version : 5.5.60-0+deb7u1
CVE ID : CVE-2018-2755 CVE-2018-2761 CVE-2018-2771 CVE-2018-2773
CVE-2018-2781 CVE-2018-2813 CVE-2018-2817 CVE-2018-2818
CVE-2018-2819

Several issues have been discovered in the MySQL database server. The
vulnerabilities are addressed by upgrading MySQL to the new upstream
version 5.5.60, which includes additional changes. Please see the MySQL
5.5 Release Notes and Oracle's Critical Patch Update advisory for
further details:

https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-60.html
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

For Debian 7 "Wheezy", these problems have been fixed in version
5.5.60-0+deb7u1.

We recommend that you upgrade your mysql-5.5 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian8ppc64elmysql-server-core-5.5< 5.5.60-0+deb8u1mysql-server-core-5.5_5.5.60-0+deb8u1_ppc64el.deb
Debian7armellibmysqld-pic< 5.5.60-0+deb7u1libmysqld-pic_5.5.60-0+deb7u1_armel.deb
Debian8armhfmysql-server-5.5< 5.5.60-0+deb8u1mysql-server-5.5_5.5.60-0+deb8u1_armhf.deb
Debian8ppc64ellibmysqlclient18< 5.5.60-0+deb8u1libmysqlclient18_5.5.60-0+deb8u1_ppc64el.deb
Debian8mipsmysql-source-5.5< 5.5.60-0+deb8u1mysql-source-5.5_5.5.60-0+deb8u1_mips.deb
Debian8mipsmysql-testsuite-5.5< 5.5.60-0+deb8u1mysql-testsuite-5.5_5.5.60-0+deb8u1_mips.deb
Debian8i386libmysqld-pic< 5.5.60-0+deb8u1libmysqld-pic_5.5.60-0+deb8u1_i386.deb
Debian7armhflibmysqlclient18< 5.5.60-0+deb7u1libmysqlclient18_5.5.60-0+deb7u1_armhf.deb
Debian7armelmysql-server-core-5.5< 5.5.60-0+deb7u1mysql-server-core-5.5_5.5.60-0+deb7u1_armel.deb
Debian8armhfmysql-server-core-5.5< 5.5.60-0+deb8u1mysql-server-core-5.5_5.5.60-0+deb8u1_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	ppc64el	mysql-server-core-5.5	< 5.5.60-0+deb8u1	mysql-server-core-5.5_5.5.60-0+deb8u1_ppc64el.deb
Debian	7	armel	libmysqld-pic	< 5.5.60-0+deb7u1	libmysqld-pic_5.5.60-0+deb7u1_armel.deb
Debian	8	armhf	mysql-server-5.5	< 5.5.60-0+deb8u1	mysql-server-5.5_5.5.60-0+deb8u1_armhf.deb
Debian	8	ppc64el	libmysqlclient18	< 5.5.60-0+deb8u1	libmysqlclient18_5.5.60-0+deb8u1_ppc64el.deb
Debian	8	mips	mysql-source-5.5	< 5.5.60-0+deb8u1	mysql-source-5.5_5.5.60-0+deb8u1_mips.deb
Debian	8	mips	mysql-testsuite-5.5	< 5.5.60-0+deb8u1	mysql-testsuite-5.5_5.5.60-0+deb8u1_mips.deb
Debian	8	i386	libmysqld-pic	< 5.5.60-0+deb8u1	libmysqld-pic_5.5.60-0+deb8u1_i386.deb
Debian	7	armhf	libmysqlclient18	< 5.5.60-0+deb7u1	libmysqlclient18_5.5.60-0+deb7u1_armhf.deb
Debian	7	armel	mysql-server-core-5.5	< 5.5.60-0+deb7u1	mysql-server-core-5.5_5.5.60-0+deb7u1_armel.deb
Debian	8	armhf	mysql-server-core-5.5	< 5.5.60-0+deb8u1	mysql-server-core-5.5_5.5.60-0+deb8u1_armhf.deb