RHBA-2019:2518 - Bug Fix Advisory

Topic

Updated rhscl/mysql-80-rhel7 container image is now available for Red Hat Software Collections for Red Hat Enterprise Linux 7.

Description

The rhscl/mysql-80-rhel7 container image has been updated for Red Hat Software Collections for Red Hat Enterprise Linux 7 to address following security advisories: RHSA-2019:2484 [1]

Users of rhscl/mysql-80-rhel7 container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.

You can find images updated by this advisory in Red Hat Container Catalog [2]

Solution

The Red Hat Software Collections container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog [3]

Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

Affected Products

• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7 s390x
• Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7 ppc64le

Fixes

• BZ - 1666738 - CVE-2019-2420 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)
• BZ - 1666740 - CVE-2019-2434 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)
• BZ - 1666741 - CVE-2019-2436 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)
• BZ - 1666742 - CVE-2019-2455 mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)
• BZ - 1666743 - CVE-2019-2481 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)
• BZ - 1666744 - CVE-2019-2482 mysql: Server: PS unspecified vulnerability (CPU Jan 2019)
• BZ - 1666745 - CVE-2019-2486 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)
• BZ - 1666746 - CVE-2019-2494 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)
• BZ - 1666747 - CVE-2019-2495 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)
• BZ - 1666748 - CVE-2019-2502 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)
• BZ - 1666749 - CVE-2019-2503 mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019)
• BZ - 1666750 - CVE-2019-2507 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)
• BZ - 1666751 - CVE-2019-2510 mysql: InnoDB unspecified vulnerability (CPU Jan 2019)
• BZ - 1666753 - CVE-2019-2528 mysql: Server: Partition unspecified vulnerability (CPU Jan 2019)
• BZ - 1666755 - CVE-2019-2529 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)
• BZ - 1666756 - CVE-2019-2530 mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)
• BZ - 1666757 - CVE-2019-2531 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)
• BZ - 1666758 - CVE-2019-2532 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)
• BZ - 1666759 - CVE-2019-2533 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)
• BZ - 1666760 - CVE-2019-2534 mysql: Server: Replication unspecified vulnerability (CPU Jan 2019)
• BZ - 1666761 - CVE-2019-2535 mysql: Server: Options unspecified vulnerability (CPU Jan 2019)
• BZ - 1666762 - CVE-2019-2536 mysql: Server: Packaging unspecified vulnerability (CPU Jan 2019)
• BZ - 1666763 - CVE-2019-2537 mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)
• BZ - 1666764 - CVE-2019-2539 mysql: Server: Connection unspecified vulnerability (CPU Jan 2019)
• BZ - 1702958 - CVE-2019-2580 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
• BZ - 1702959 - CVE-2019-2581 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702960 - CVE-2019-2584 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
• BZ - 1702961 - CVE-2019-2585 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
• BZ - 1702962 - CVE-2019-2587 mysql: Server: Partition unspecified vulnerability (CPU Apr 2019)
• BZ - 1702963 - CVE-2019-2589 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
• BZ - 1702964 - CVE-2019-2592 mysql: Server: PS unspecified vulnerability (CPU Apr 2019)
• BZ - 1702965 - CVE-2019-2593 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
• BZ - 1702966 - CVE-2019-2596 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702967 - CVE-2019-2606 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
• BZ - 1702968 - CVE-2019-2607 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702969 - CVE-2019-2614 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
• BZ - 1702970 - CVE-2019-2617 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
• BZ - 1702971 - CVE-2019-2620 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
• BZ - 1702972 - CVE-2019-2623 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)
• BZ - 1702973 - CVE-2019-2624 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
• BZ - 1702974 - CVE-2019-2625 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702975 - CVE-2019-2626 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)
• BZ - 1702976 - CVE-2019-2627 mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
• BZ - 1702977 - CVE-2019-2628 mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
• BZ - 1702978 - CVE-2019-2630 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
• BZ - 1702979 - CVE-2019-2631 mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2019)
• BZ - 1702981 - CVE-2019-2635 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
• BZ - 1702982 - CVE-2019-2636 mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2019)
• BZ - 1702983 - CVE-2019-2644 mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)
• BZ - 1702984 - CVE-2019-2681 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702985 - CVE-2019-2683 mysql: Server: Options unspecified vulnerability (CPU Apr 2019)
• BZ - 1702986 - CVE-2019-2685 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702987 - CVE-2019-2686 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702989 - CVE-2019-2687 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702990 - CVE-2019-2688 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702991 - CVE-2019-2689 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702992 - CVE-2019-2691 mysql: Server: Security: Roles unspecified vulnerability (CPU Apr 2019)
• BZ - 1702993 - CVE-2019-2693 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702994 - CVE-2019-2694 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702995 - CVE-2019-2695 mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)
• BZ - 1702997 - CVE-2019-2634 mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
• BZ - 1731997 - CVE-2019-2737 mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)
• BZ - 1731998 - CVE-2019-2738 mysql: Server: Compiling unspecified vulnerability (CPU Jul 2019)
• BZ - 1731999 - CVE-2019-2739 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)
• BZ - 1732000 - CVE-2019-2740 mysql: Server: XML unspecified vulnerability (CPU Jul 2019)
• BZ - 1732005 - CVE-2019-2752 mysql: Server: Options unspecified vulnerability (CPU Jul 2019)
• BZ - 1732006 - CVE-2019-2755 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)
• BZ - 1732007 - CVE-2019-2757 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732008 - CVE-2019-2758 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
• BZ - 1732009 - CVE-2019-2774 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732010 - CVE-2019-2778 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)
• BZ - 1732011 - CVE-2019-2780 mysql: Server: Components / Services unspecified vulnerability (CPU Jul 2019)
• BZ - 1732012 - CVE-2019-2784 mysql: Server: DML unspecified vulnerability (CPU Jul 2019)
• BZ - 1732013 - CVE-2019-2785 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
• BZ - 1732015 - CVE-2019-2789 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)
• BZ - 1732017 - CVE-2019-2795 mysql: Server: Charsets unspecified vulnerability (CPU Jul 2019)
• BZ - 1732018 - CVE-2019-2796 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732019 - CVE-2019-2797 mysql: Client programs unspecified vulnerability (CPU Jul 2019)
• BZ - 1732020 - CVE-2019-2798 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
• BZ - 1732021 - CVE-2019-2800 mysql: Server: Replication unspecified vulnerability (CPU Jul 2019)
• BZ - 1732022 - CVE-2019-2801 mysql: Server: FTS unspecified vulnerability (CPU Jul 2019)
• BZ - 1732023 - CVE-2019-2802 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732024 - CVE-2019-2803 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732025 - CVE-2019-2805 mysql: Server: Parser unspecified vulnerability (CPU Jul 2019)
• BZ - 1732026 - CVE-2019-2808 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732027 - CVE-2019-2810 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732028 - CVE-2019-2811 mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)
• BZ - 1732029 - CVE-2019-2812 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732030 - CVE-2019-2814 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
• BZ - 1732031 - CVE-2019-2815 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732032 - CVE-2019-2819 mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2019)
• BZ - 1732034 - CVE-2019-2826 mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2019)
• BZ - 1732035 - CVE-2019-2830 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732036 - CVE-2019-2834 mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)
• BZ - 1732037 - CVE-2019-2879 mysql: InnoDB unspecified vulnerability (CPU Jul 2019)

CVEs

• CVE-2019-2420
• CVE-2019-2434
• CVE-2019-2436
• CVE-2019-2455
• CVE-2019-2481
• CVE-2019-2482
• CVE-2019-2486
• CVE-2019-2494
• CVE-2019-2495
• CVE-2019-2502
• CVE-2019-2503
• CVE-2019-2507
• CVE-2019-2510
• CVE-2019-2528
• CVE-2019-2529
• CVE-2019-2530
• CVE-2019-2531
• CVE-2019-2532
• CVE-2019-2533
• CVE-2019-2534
• CVE-2019-2535
• CVE-2019-2536
• CVE-2019-2537
• CVE-2019-2539
• CVE-2019-2580
• CVE-2019-2581
• CVE-2019-2584
• CVE-2019-2585
• CVE-2019-2587
• CVE-2019-2589
• CVE-2019-2592
• CVE-2019-2593
• CVE-2019-2596
• CVE-2019-2606
• CVE-2019-2607
• CVE-2019-2614
• CVE-2019-2617
• CVE-2019-2620
• CVE-2019-2623
• CVE-2019-2624
• CVE-2019-2625
• CVE-2019-2626
• CVE-2019-2627
• CVE-2019-2628
• CVE-2019-2630
• CVE-2019-2631
• CVE-2019-2634
• CVE-2019-2635
• CVE-2019-2636
• CVE-2019-2644
• CVE-2019-2681
• CVE-2019-2683
• CVE-2019-2685
• CVE-2019-2686
• CVE-2019-2687
• CVE-2019-2688
• CVE-2019-2689
• CVE-2019-2691
• CVE-2019-2693
• CVE-2019-2694
• CVE-2019-2695
• CVE-2019-2737
• CVE-2019-2738
• CVE-2019-2739
• CVE-2019-2740
• CVE-2019-2752
• CVE-2019-2755
• CVE-2019-2757
• CVE-2019-2758
• CVE-2019-2774
• CVE-2019-2778
• CVE-2019-2780
• CVE-2019-2784
• CVE-2019-2785
• CVE-2019-2789
• CVE-2019-2795
• CVE-2019-2796
• CVE-2019-2797
• CVE-2019-2798
• CVE-2019-2800
• CVE-2019-2801
• CVE-2019-2802
• CVE-2019-2803
• CVE-2019-2805
• CVE-2019-2808
• CVE-2019-2810
• CVE-2019-2811
• CVE-2019-2812
• CVE-2019-2814
• CVE-2019-2815
• CVE-2019-2819
• CVE-2019-2826
• CVE-2019-2830
• CVE-2019-2834
• CVE-2019-2879

References

• [1]
• https://access.redhat.com/containers/?scroll=true#/advisory/RHSA-2019:2484
• [2]
• https://access.redhat.com/containers/?scroll=true#/advisory/RHBA-2019:45148-01
• [3]
• https://access.redhat.com/containers/?tab=images#/registry.access.redhat.com/test