Lucene search

K
amazonAmazonALAS-2012-141
HistoryNov 20, 2012 - 6:26 a.m.

Important: mysql51

2012-11-2006:26:00
alas.aws.amazon.com
21

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

65.4%

Issue Overview:

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages, listed below.

1. April 2012: http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html#AppendixMSQL
2. July 2012: http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html#AppendixMSQL
3. October 2012: http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html#AppendixMSQL

Affected Packages:

mysql51

Issue Correction:
Run yum update mysql51 to update your system.

New Packages:

i686:  
    mysql51-bench-5.1.66-1.56.amzn1.i686  
    mysql51-server-5.1.66-1.56.amzn1.i686  
    mysql51-test-5.1.66-1.56.amzn1.i686  
    mysql51-embedded-devel-5.1.66-1.56.amzn1.i686  
    mysql51-libs-5.1.66-1.56.amzn1.i686  
    mysql51-devel-5.1.66-1.56.amzn1.i686  
    mysql51-common-5.1.66-1.56.amzn1.i686  
    mysql51-debuginfo-5.1.66-1.56.amzn1.i686  
    mysql51-5.1.66-1.56.amzn1.i686  
    mysql51-embedded-5.1.66-1.56.amzn1.i686  
  
src:  
    mysql51-5.1.66-1.56.amzn1.src  
  
x86_64:  
    mysql51-embedded-5.1.66-1.56.amzn1.x86_64  
    mysql51-debuginfo-5.1.66-1.56.amzn1.x86_64  
    mysql51-5.1.66-1.56.amzn1.x86_64  
    mysql51-embedded-devel-5.1.66-1.56.amzn1.x86_64  
    mysql51-common-5.1.66-1.56.amzn1.x86_64  
    mysql51-bench-5.1.66-1.56.amzn1.x86_64  
    mysql51-test-5.1.66-1.56.amzn1.x86_64  
    mysql51-devel-5.1.66-1.56.amzn1.x86_64  
    mysql51-server-5.1.66-1.56.amzn1.x86_64  
    mysql51-libs-5.1.66-1.56.amzn1.x86_64  

Additional References

Red Hat: CVE-2012-1688

Mitre: CVE-2012-1688

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

65.4%