1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2017-9e28c78e07

[FEDORA-2017-9e28c78e07] Fedora 27: community-mysql

Severity High
Affected Packages 1
CVEs 12
Info Packages References Vulnerabilities

A quarter year regular dose of fixed CVE's.
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-20.html .
rhbz#1497694: Fix owner and perms on log file in post script CVE fixes:
rhbz#1503701 CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276
CVE-2017-10279 CVE-2017-10283 CVE-2017-10286 CVE-2017-10294 CVE-2017-10314
CVE-2017-10378 CVE-2017-10379 CVE-2017-10384 Others: Move all test
binaries to -test package Dont ship unneeded man pages on systemd platforms
Remove mysql_config_editor from -devel package, shipped in client

Package Affected Version
pkg:rpm/fedora/community-mysql?distro=fedora-27 < 5.7.20.1.fc27
ID
FEDORA-2017-9e28c78e07
Severity
high
Severity from
CVE-2017-10155
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9e28c78e07
Published
2017-11-11T13:51:45
(6 years ago)
Modified
2017-11-11T13:51:45
(6 years ago)
Rights
Copyright 2017 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 1497694 Bug #1497694 - mysqld service not working by default after bd72127 https://bugzilla.redhat.com/show_bug.cgi?id=1497694
Bugzilla 1503357 Bug #1503357 - community-mysql-5.7.20 is available https://bugzilla.redhat.com/show_bug.cgi?id=1503357
Bugzilla 1503701 Bug #1503701 - CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276 CVE-2017-10279 CVE-2017-10283 CVE-2017-10286 CVE-2017-10294 CVE-2017-10314 CVE-2017-10378 CVE-2017-10379 CVE-2017-10384 community-mysql: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1503701
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/community-mysql?distro=fedora-27 fedora community-mysql < 5.7.20.1.fc27 fedora-27
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date