Synopsis
Important: rh-mysql80-mysql security update
Type/Severity
Security Advisory: Important
Topic
An update for rh-mysql80-mysql is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs.
The following packages have been upgraded to a later upstream version: rh-mysql80-mysql (8.0.17).
Security Fix(es):
- mysql: Server: Replication multiple unspecified vulnerabilities (CVE-2019-2800, CVE-2019-2436, CVE-2019-2531, CVE-2019-2534, CVE-2019-2614, CVE-2019-2617, CVE-2019-2630, CVE-2019-2634, CVE-2019-2635, CVE-2019-2755)
- mysql: Server: Optimizer multiple unspecified vulnerabilities (CVE-2019-2420, CVE-2019-2481, CVE-2019-2507, CVE-2019-2529, CVE-2019-2530, CVE-2019-2581, CVE-2019-2596, CVE-2019-2607, CVE-2019-2625, CVE-2019-2681, CVE-2019-2685, CVE-2019-2686, CVE-2019-2687, CVE-2019-2688, CVE-2019-2689, CVE-2019-2693, CVE-2019-2694, CVE-2019-2695, CVE-2019-2757, CVE-2019-2774, CVE-2019-2796, CVE-2019-2802, CVE-2019-2803, CVE-2019-2808, CVE-2019-2810, CVE-2019-2812, CVE-2019-2815, CVE-2019-2830, CVE-2019-2834)
- mysql: Server: Parser multiple unspecified vulnerabilities (CVE-2019-2434, CVE-2019-2455, CVE-2019-2805)
- mysql: Server: PS multiple unspecified vulnerabilities (CVE-2019-2482, CVE-2019-2592)
- mysql: Server: Security: Privileges multiple unspecified vulnerabilities (CVE-2019-2486, CVE-2019-2532, CVE-2019-2533, CVE-2019-2584, CVE-2019-2589, CVE-2019-2606, CVE-2019-2620, CVE-2019-2627, CVE-2019-2739, CVE-2019-2778, CVE-2019-2811, CVE-2019-2789)
- mysql: Server: DDL multiple unspecified vulnerabilities (CVE-2019-2494, CVE-2019-2495, CVE-2019-2537, CVE-2019-2626, CVE-2019-2644)
- mysql: InnoDB multiple unspecified vulnerabilities (CVE-2019-2502, CVE-2019-2510, CVE-2019-2580, CVE-2019-2585, CVE-2019-2593, CVE-2019-2624, CVE-2019-2628, CVE-2019-2758, CVE-2019-2785, CVE-2019-2798, CVE-2019-2879, CVE-2019-2814)
- mysql: Server: Connection Handling unspecified vulnerability (CVE-2019-2503)
- mysql: Server: Partition multiple unspecified vulnerabilities (CVE-2019-2528, CVE-2019-2587)
- mysql: Server: Options multiple unspecified vulnerabilities (CVE-2019-2535, CVE-2019-2623, CVE-2019-2683, CVE-2019-2752)
- mysql: Server: Packaging unspecified vulnerability (CVE-2019-2536)
- mysql: Server: Connection unspecified vulnerability (CVE-2019-2539)
- mysql: Server: Information Schema unspecified vulnerability (CVE-2019-2631)
- mysql: Server: Group Replication Plugin unspecified vulnerability (CVE-2019-2636)
- mysql: Server: Security: Roles multiple unspecified vulnerabilities (CVE-2019-2691, CVE-2019-2826)
- mysql: Server: Pluggable Auth unspecified vulnerability (CVE-2019-2737)
- mysql: Server: XML unspecified vulnerability (CVE-2019-2740)
- mysql: Server: Components / Services unspecified vulnerability (CVE-2019-2780)
- mysql: Server: DML unspecified vulnerability (CVE-2019-2784)
- mysql: Server: Charsets unspecified vulnerability (CVE-2019-2795)
- mysql: Client programs unspecified vulnerability (CVE-2019-2797)
- mysql: Server: FTS unspecified vulnerability (CVE-2019-2801)
- mysql: Server: Security: Audit unspecified vulnerability (CVE-2019-2819)
- mysql: Server: Compiling unspecified vulnerability (CVE-2019-2738)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing this update, the MySQL server daemon (mysqld) will be restarted automatically.
Affected Products
-
Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.7 x86_64
-
Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7.7 s390x
-
Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7.7 ppc64le
-
Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.6 x86_64
-
Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7.6 s390x
-
Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7.6 ppc64le
-
Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.5 x86_64
-
Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7.5 s390x
-
Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7.5 ppc64le
-
Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.4 x86_64
-
Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7.4 s390x
-
Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7.4 ppc64le
-
Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64
-
Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7 s390x
-
Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7 ppc64le
-
Red Hat Software Collections (for RHEL Server for ARM) 1 aarch64
-
Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 7 x86_64
Fixes
- BZ - 1666738 - CVE-2019-2420 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)
- BZ - 1666740 - CVE-2019-2434 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)
- BZ - 1666741 - CVE-2019-2436 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)
- BZ - 1666742 - CVE-2019-2455 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)
- BZ - 1666743 - CVE-2019-2481 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)
- BZ - 1666744 - CVE-2019-2482 mysql: Server: PS unspecified vulnerability (CPU Jan 2019)
- BZ - 1666745 - CVE-2019-2486 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)
- BZ - 1666746 - CVE-2019-2494 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)
- BZ - 1666747 - CVE-2019-2495 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)
- BZ - 1666748 - CVE-2019-2502 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)
- BZ - 1666749 - CVE-2019-2503 mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019)
- BZ - 1666750 - CVE-2019-2507 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)
- BZ - 1666751 - CVE-2019-2510 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)
- BZ - 1666753 - CVE-2019-2528 mysql: Server: Partition unspecified vulnerability (CPU Jan 2019)
- BZ - 1666755 - CVE-2019-2529 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)
- BZ - 1666756 - CVE-2019-2530 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)
- BZ - 1666757 - CVE-2019-2531 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)
- BZ - 1666758 - CVE-2019-2532 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)
- BZ - 1666759 - CVE-2019-2533 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)
- BZ - 1666760 - CVE-2019-2534 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)
- BZ - 1666761 - CVE-2019-2535 mysql: Server: Options unspecified vulnerability (CPU Jan 2019)
- BZ - 1666762 - CVE-2019-2536 mysql: Server: Packaging unspecified vulnerability (CPU Jan 2019)
- BZ - 1666763 - CVE-2019-2537 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)
- BZ - 1666764 - CVE-2019-2539 mysql: Server: Connection unspecified vulnerability (CPU Jan 2019)
- BZ - 1702958 - CVE-2019-2580 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
- BZ - 1702959 - CVE-2019-2581 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702960 - CVE-2019-2584 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
- BZ - 1702961 - CVE-2019-2585 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
- BZ - 1702962 - CVE-2019-2587 mysql: Server: Partition unspecified vulnerability (CPU Apr 2019)
- BZ - 1702963 - CVE-2019-2589 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
- BZ - 1702964 - CVE-2019-2592 mysql: Server: PS unspecified vulnerability (CPU Apr 2019)
- BZ - 1702965 - CVE-2019-2593 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
- BZ - 1702966 - CVE-2019-2596 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702967 - CVE-2019-2606 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
- BZ - 1702968 - CVE-2019-2607 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702969 - CVE-2019-2614 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
- BZ - 1702970 - CVE-2019-2617 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
- BZ - 1702971 - CVE-2019-2620 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
- BZ - 1702972 - CVE-2019-2623 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)
- BZ - 1702973 - CVE-2019-2624 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
- BZ - 1702974 - CVE-2019-2625 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702975 - CVE-2019-2626 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)
- BZ - 1702976 - CVE-2019-2627 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
- BZ - 1702977 - CVE-2019-2628 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
- BZ - 1702978 - CVE-2019-2630 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
- BZ - 1702979 - CVE-2019-2631 mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2019)
- BZ - 1702981 - CVE-2019-2635 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
- BZ - 1702982 - CVE-2019-2636 mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2019)
- BZ - 1702983 - CVE-2019-2644 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)
- BZ - 1702984 - CVE-2019-2681 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702985 - CVE-2019-2683 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)
- BZ - 1702986 - CVE-2019-2685 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702987 - CVE-2019-2686 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702989 - CVE-2019-2687 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702990 - CVE-2019-2688 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702991 - CVE-2019-2689 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702992 - CVE-2019-2691 mysql: Server: Security: Roles unspecified vulnerability (CPU Apr 2019)
- BZ - 1702993 - CVE-2019-2693 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702994 - CVE-2019-2694 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702995 - CVE-2019-2695 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
- BZ - 1702997 - CVE-2019-2634 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
- BZ - 1731997 - CVE-2019-2737 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)
- BZ - 1731998 - CVE-2019-2738 mysql: Server: Compiling unspecified vulnerability (CPU Jul 2019)
- BZ - 1731999 - CVE-2019-2739 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)
- BZ - 1732000 - CVE-2019-2740 mysql: Server: XML unspecified vulnerability (CPU Jul 2019)
- BZ - 1732005 - CVE-2019-2752 mysql: Server: Options unspecified vulnerability (CPU Jul 2019)
- BZ - 1732006 - CVE-2019-2755 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)
- BZ - 1732007 - CVE-2019-2757 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732008 - CVE-2019-2758 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
- BZ - 1732009 - CVE-2019-2774 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732010 - CVE-2019-2778 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)
- BZ - 1732011 - CVE-2019-2780 mysql: Server: Components / Services unspecified vulnerability (CPU Jul 2019)
- BZ - 1732012 - CVE-2019-2784 mysql: Server: DML unspecified vulnerability (CPU Jul 2019)
- BZ - 1732013 - CVE-2019-2785 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
- BZ - 1732015 - CVE-2019-2789 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)
- BZ - 1732017 - CVE-2019-2795 mysql: Server: Charsets unspecified vulnerability (CPU Jul 2019)
- BZ - 1732018 - CVE-2019-2796 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732019 - CVE-2019-2797 mysql: Client programs unspecified vulnerability (CPU Jul 2019)
- BZ - 1732020 - CVE-2019-2798 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
- BZ - 1732021 - CVE-2019-2800 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)
- BZ - 1732022 - CVE-2019-2801 mysql: Server: FTS unspecified vulnerability (CPU Jul 2019)
- BZ - 1732023 - CVE-2019-2802 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732024 - CVE-2019-2803 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732025 - CVE-2019-2805 mysql: Server: Parser unspecified vulnerability (CPU Jul 2019)
- BZ - 1732026 - CVE-2019-2808 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732027 - CVE-2019-2810 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732028 - CVE-2019-2811 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)
- BZ - 1732029 - CVE-2019-2812 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732030 - CVE-2019-2814 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
- BZ - 1732031 - CVE-2019-2815 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732032 - CVE-2019-2819 mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2019)
- BZ - 1732034 - CVE-2019-2826 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019)
- BZ - 1732035 - CVE-2019-2830 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732036 - CVE-2019-2834 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
- BZ - 1732037 - CVE-2019-2879 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
CVEs
References
Vulmon