DSA-2985-1: mysql-5.5 - security update
Summary
DSA-2985-1: mysql-5.5 - security update. Affects mysql-5.5 versions < 5.5.38-0+wheezy1. Fixed in 5.5.38-0+wheezy1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MySQL is a popular open-source relational database management system. It provides a robust and scalable platform for storing and retrieving data. The mysql-5.5 package is a specific version of MySQL that is used in the Debian 7 (wheezy) distribution. This package is vulnerable to several security issues that have been discovered.
Vulnerability Detail
The vulnerabilities in mysql-5.5 are addressed by upgrading to the new upstream version 5.5.38. These vulnerabilities could potentially be exploited by attackers to gain unauthorized access, execute arbitrary code, or cause denial of service. The specific vulnerabilities and their impact can be found in the MySQL 5.5 Release Notes and Oracle's Critical Patch Update advisory.
How To Fix
Minimum fixed version
5.5.38-0+wheezy1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade mysql-5.5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading mysql-5.5 to the fixed version is crucial to address the identified vulnerabilities. It is recommended to follow the upgrade instructions provided by the Debian distribution and ensure proper testing and backup procedures are in place. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for mysql-5.5 →
FAQ
mysql-5.5 is a specific version of the MySQL database server used in the Debian 7 (wheezy) distribution.
The vulnerabilities addressed by this update include CVE-2014-2494, CVE-2014-4207, CVE-2014-4258, and CVE-2014-4260. These vulnerabilities could potentially allow unauthorized access, arbitrary code execution, or denial of service.
To upgrade mysql-5.5 to the fixed version, you can follow the upgrade instructions provided by the Debian distribution. It is important to ensure that the upgrade process is properly tested and any necessary backups are taken before proceeding.
No specific workarounds are mentioned for these vulnerabilities. It is recommended to upgrade to the fixed version as soon as possible.
More information about these vulnerabilities can be found in the MySQL 5.5 Release Notes and Oracle's Critical Patch Update advisory. These resources provide detailed information about the vulnerabilities and their impact.
Related vulnerabilities
Recent vulnerabilities recorded for mysql-5.5.
