Security Update for mysql-5.5
Summary
DLA-1355-1: mysql-5.5 - security update. Affects mysql-5.5 versions < 5.5.60-0+deb7u1. Fixed in 5.5.60-0+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mysql-5.5 is a popular open-source database server used for managing relational databases. It provides a wide range of features and functionalities for storing and retrieving data. However, several vulnerabilities have been discovered in the MySQL database server, which can potentially compromise the security of the system.
Vulnerability Detail
The vulnerabilities in mysql-5.5 are addressed by upgrading to the new upstream version 5.5.60. These vulnerabilities include multiple security issues that could lead to unauthorized access, data manipulation, or denial of service attacks. The specific vulnerabilities and their potential impact are as follows:
- CVE-2018-2755: [Brief description of the vulnerability and its impact]
- CVE-2018-2761: [Brief description of the vulnerability and its impact]
- CVE-2018-2771: [Brief description of the vulnerability and its impact]
- CVE-2018-2773: [Brief description of the vulnerability and its impact]
- CVE-2018-2781: [Brief description of the vulnerability and its impact]
- CVE-2018-2813: [Brief description of the vulnerability and its impact]
- CVE-2018-2817: [Brief description of the vulnerability and its impact]
- CVE-2018-2818: [Brief description of the vulnerability and its impact]
- CVE-2018-2819: [Brief description of the vulnerability and its impact]
How To Fix
Minimum fixed version
5.5.60-0+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade mysql-5.5
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities. It is essential to apply the security update to ensure the system's safety.
Conclusion
Upgrading to the latest version of mysql-5.5 is crucial to address the identified vulnerabilities and ensure the security of the system. It is recommended to follow the provided steps for upgrading the package. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for mysql-5.5 →
FAQ
mysql-5.5 is an open-source database server used for managing relational databases. It provides various features and functionalities for storing and retrieving data.
These vulnerabilities can lead to unauthorized access, data manipulation, or denial of service attacks on the mysql-5.5 server, potentially compromising the security of the system.
To fix the vulnerabilities, it is recommended to upgrade the mysql-5.5 package to version 5.5.60-0+deb7u1. Detailed steps for the upgrade process can be found in the 'how_to_fix' section.
No, there are no known workarounds for these vulnerabilities. It is crucial to apply the security update to mitigate the risks.
You can find more information about these vulnerabilities in the MySQL 5.5 Release Notes and Oracle's Critical Patch Update advisory. Links to these resources are provided in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for mysql-5.5.