==========================================================================
Ubuntu Security Notice USN-3357-1
July 20, 2017
mysql-5.5, mysql-5.7 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 17.04
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in MySQL.
Software Description:
– mysql-5.7: MySQL database
– mysql-5.5: MySQL database
Details:
Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.5.57 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS
and Ubuntu 17.04 have been updated to MySQL 5.7.19.
In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.
Please see the following for more information:
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-56.html
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-57.html
http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-19.html
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 17.04:
mysql-server-5.7 5.7.19-0ubuntu0.17.04.1
Ubuntu 16.04 LTS:
mysql-server-5.7 5.7.19-0ubuntu0.16.04.1
Ubuntu 14.04 LTS:
mysql-server-5.5 5.5.57-0ubuntu0.14.04.1
In general, a standard system update will make all the necessary changes.
References:
https://www.ubuntu.com/usn/usn-3357-1
CVE-2017-3529, CVE-2017-3633, CVE-2017-3634, CVE-2017-3635,
CVE-2017-3636, CVE-2017-3637, CVE-2017-3638, CVE-2017-3639,
CVE-2017-3640, CVE-2017-3641, CVE-2017-3642, CVE-2017-3643,
CVE-2017-3644, CVE-2017-3645, CVE-2017-3647, CVE-2017-3648,
CVE-2017-3649, CVE-2017-3650, CVE-2017-3651, CVE-2017-3652,
CVE-2017-3653
Package Information:
https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.19-0ubuntu0.17.04.1
https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.19-0ubuntu0.16.04.1
https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.57-0ubuntu0.14.04.1
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2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=0HMS
—–END PGP SIGNATURE—–
—
==========================================================================
Ubuntu Security Notice USN-3357-2
July 24, 2017
mysql-5.5 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 12.04 ESM
Summary:
Several security issues were fixed in MySQL.
Software Description:
– mysql-5.5: MySQL database
Details:
USN-3357-1 fixed several vulnerabilities in MySQL. This update
provides the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
Multiple security issues were discovered in MySQL and this update
includes new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.5.57 in Ubuntu 12.04 ESM.
In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.
Please see the following for more information:
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-57.html
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 ESM:
mysql-server-5.5 5.5.57-0ubuntu0.12.04.1
In general, a standard system update will make all the necessary
changes.
References:
https://www.ubuntu.com/usn/usn-3357-2
https://www.ubuntu.com/usn/usn-3357-1
CVE-2017-3302, CVE-2017-3305, CVE-2017-3308, CVE-2017-3309,
CVE-2017-3329, CVE-2017-3453, CVE-2017-3456, CVE-2017-3461,
CVE-2017-3462, CVE-2017-3463, CVE-2017-3464, CVE-2017-3600,
CVE-2017-3635, CVE-2017-3636, CVE-2017-3641, CVE-2017-3648,
CVE-2017-3651, CVE-2017-3652, CVE-2017-3653
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2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=R9W0
—–END PGP SIGNATURE—–
–
