RHSA-2014:1940High

Red Hat Security Advisory: mariadb-galera security update

Published
December 2, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (18)

CVE-2012-5615 →CVE-2014-2494 →CVE-2014-4207 →CVE-2014-4258 →CVE-2014-4260 →CVE-2014-4274 →CVE-2014-4287 →CVE-2014-6463 →CVE-2014-6464 →CVE-2014-6469 →CVE-2014-6484 →CVE-2014-6505 →CVE-2014-6507 →CVE-2014-6520 →CVE-2014-6530 →CVE-2014-6551 →CVE-2014-6555 →CVE-2014-6559 →

📋 Description

CVE-2012-5615 — mysql: Remote Preauth User Enumeration flaw CVE-2014-2494 — mysql: unspecified vulnerability related to ENARC (CPU July 2014) CVE-2014-4207 — mysql: unspecified vulnerability related to SROPTZR (CPU July 2014) CVE-2014-4258 — mysql: unspecified vulnerability related to SRINFOSC (CPU July 2014) CVE-2014-4260 — mysql: unspecified vulnerability related to SRCHAR (CPU July 2014) CVE-2014-4274 — mysql: unspecified MyISAM temporary file issue fixed in 5.5.39 and 5.6.20 CVE-2014-4287 — mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014) CVE-2014-6463 — mysql: unspecified vulnerability related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML (CPU October 2014) CVE-2014-6464 — mysql: unspecified vulnerability related to SERVER:INNODB DML FOREIGN KEYS (CPU October 2014) CVE-2014-6469 — mysql: unspecified vulnerability related to SERVER:OPTIMIZER (CPU October 2014) CVE-2014-6484 — mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014) CVE-2014-6505 — mysql: unspecified vulnerability related to SERVER:MEMORY STORAGE ENGINE (CPU October 2014) CVE-2014-6507 — mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014) CVE-2014-6520 — mysql: unspecified vulnerability related to SERVER:DDL (CPU October 2014) CVE-2014-6530 — mysql: unspecified vulnerability related to CLIENT:MYSQLDUMP (CPU October 2014) CVE-2014-6551 — mysql: unspecified vulnerability related to CLIENT:MYSQLADMIN (CPU October 2014) CVE-2014-6555 — mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014) CVE-2014-6559 — mysql: unspecified vulnerability related to C API SSL CERTIFICATE HANDLING (CPU October 2014)

🎯 Affected products5

  • Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7
  • mariadb-galera-1:5.5.40-2.el7ost.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7
  • mariadb-galera-common-1:5.5.40-2.el7ost.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7
  • mariadb-galera-debuginfo-1:5.5.40-2.el7ost.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7
  • mariadb-galera-server-1:5.5.40-2.el7ost.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

🔗 References (26)