mysql: unidentified vulnerabilities

Package(s):

mysql-5.5

CVE #(s):

CVE-2014-2494 CVE-2014-4207 CVE-2014-4258 CVE-2014-4260

Created:

July 17, 2014

Updated:

July 28, 2014

Description:

From the Ubuntu advisory:

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 5.5.38.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information:
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-38.html
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Alerts:

SUSE	SUSE-SU-2015:0743-1	mariadb	2015-04-21
Mandriva	MDVSA-2015:091	mariadb	2015-03-28
Red Hat	RHSA-2014:1937-01	mariadb-galera	2014-12-02
Red Hat	RHSA-2014:1940-01	mariadb-galera	2014-12-02
Oracle	ELSA-2014-1859	mysql55-mysql	2014-11-17
Oracle	ELSA-2014-1861	mariadb	2014-11-17
Scientific Linux	SLSA-2014:1861-1	mariadb	2014-11-17
CentOS	CESA-2014:1859	mysql55-mysql	2014-11-17
CentOS	CESA-2014:1861	mariadb	2014-11-17
Scientific Linux	SLSA-2014:1859-1	mysql55-mysql	2014-11-17
Red Hat	RHSA-2014:1860-01	mysql55-mysql	2014-11-17
Red Hat	RHSA-2014:1859-01	mysql55-mysql	2014-11-17
Red Hat	RHSA-2014:1862-01	mariadb55-mariadb	2014-11-17
Red Hat	RHSA-2014:1861-01	mariadb	2014-11-17
SUSE	SUSE-SU-2014:1072-1	MySQL	2014-08-28
Mageia	MGASA-2014-0299	mariadb	2014-07-26
Debian	DSA-2985-1	mysql-5.5	2014-07-22
Ubuntu	USN-2291-1	mysql-5.5	2014-07-17