Loading story…
Red Hat released updated MariaDB packages for Red Hat Enterprise Linux 7 and Red Hat Software Collections 2 to remediate CVE-2015-3152, a man-in-the-middle vulnerability in which MySQL client connections using --ssl could be downgraded or stripped of SSL/TLS protection. The flaw affected MariaDB 5.5 and 10.0 package streams and could expose database traffic to interception when clients did not require encrypted transport.
The updates deliver MariaDB 5.5.44 through the mariadb55-mariadb and RHEL 7 packages, and MariaDB 10.0.20 through rh-mariadb100-mariadb. They also address 15 additional MariaDB/MySQL server vulnerabilities in the 5.5 updates and 18 additional vulnerabilities in the 10.0 update, based on Oracle's Critical Patch Update advisory. Red Hat rated the 5.5 updates Moderate and the 10.0 update Important, advised affected users to install the packages, and noted that installation automatically restarts mysqld.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
Red Hat released a Moderate-security MariaDB update for Red Hat Enterprise Linux 7, upgrading the software to version 5.5.44. It fixed CVE-2015-3152 and 15 additional MariaDB/MySQL server vulnerabilities; mysqld restarts automatically after installation.
Red Hat released a Moderate-security mariadb55-mariadb update for Red Hat Software Collections 2, upgrading MariaDB to 5.5.44. The update remediated CVE-2015-3152, which could allow a man-in-the-middle attacker to strip SSL/TLS from --ssl MySQL client connections, plus 15 other vulnerabilities.
Red Hat released an Important-security update for rh-mariadb100-mariadb in Red Hat Software Collections 2, upgrading MariaDB to 10.0.20. It fixed CVE-2015-3152 and 18 additional MariaDB/MySQL server vulnerabilities; installing it restarts mysqld automatically.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
6 references tracked. Mallory keeps watching after this page renders.
rhn.redhat.com
Open sourcerhn.redhat.com
Open sourcerhn.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released MariaDB updates for Red Hat Enterprise Linux 7 and Red Hat Software Collections that remediate **CVE-2016-2047**, a TLS/X.509 hostname-validation flaw in the MariaDB client library. A man-in-the-middle attacker could exploit the defect to impersonate a database server during encrypted connections. The updates include MariaDB 5.5.47 for RHEL 7, 5.5.49 for the `mariadb55-mariadb` Software Collection, and `rh-mariadb100-mariadb` 10.0.25-4 for supported RHEL 6 and 7 Software Collections systems. The advisories also address numerous Oracle MySQL-derived defects, including **CVE-2015-4792**, **CVE-2015-4802**, **CVE-2015-4815**, and **CVE-2015-4870** in MySQL Server Partition, DDL, and Parser components. Authenticated network attackers could use these flaws against affected MySQL versions to hang or repeatedly crash database servers, causing complete denial of service; the Software Collections MariaDB update additionally fixes PCRE regular-expression issues that could crash MariaDB or potentially allow arbitrary code execution. Red Hat noted that `mysqld` restarts automatically after installation.
Aug 29, 2026
Red Hat released **RHSA-2015:0116**, **RHSA-2015:0117**, and **RHSA-2015:0118** to upgrade MySQL and MariaDB packages to version **5.5.41** and remediate seven vulnerabilities inherited from Oracle’s January 2015 Critical Patch Update. Affected deployments include Red Hat Enterprise Linux 7 MariaDB installations and Red Hat Software Collections 1 MySQL/MariaDB installations on RHEL 6 and 7, including applicable RHUI Server variants. The flaws affect InnoDB DML and foreign-key handling, privilege management, replication, DDL, and encryption functionality. Included issues such as **CVE-2014-6568** could allow an authenticated remote user to cause partial service-availability impact, while **CVE-2015-0374** could expose confidential information through Server Security, Privileges, and Foreign Key functionality. Red Hat advised affected users to install the updated packages; the `mysqld` service restarts automatically after installation.
Aug 29, 2026
Red Hat released Important updates for MySQL and MariaDB packages in Red Hat Software Collections, addressing the configuration-file injection flaw **CVE-2016-6662**, MyISAM repair race conditions **CVE-2016-6663/CVE-2016-5616**, and insecure `mysqld_safe` error-log handling tracked as **CVE-2016-6664/CVE-2016-5617**. Depending on configuration, attackers with database privileges, `FILE` access, or local shell access could write option files, manipulate files writable by the `mysql` account, or exploit symlink and log-path handling to obtain elevated execution; root-level impact depended on `mysqld_safe` and file-permission configuration. The updates also remediate remotely reachable denial-of-service flaws **CVE-2016-3492** and **CVE-2016-5612**, which allow low-privileged network attackers to hang or repeatedly crash affected MySQL servers, alongside additional Oracle CPU vulnerabilities. Affected Software Collections deployments should install the applicable updated packages—`mysql55-mysql` 5.5.52, `mariadb55-mariadb` 5.5.53, `rh-mysql56-mysql` 5.6.34, or `rh-mariadb100-mariadb` 10.0.28 or later; installation automatically restarts `mysqld`. Red Hat noted that default RHEL configurations reduce exposure to several escalation paths through root-owned configuration files, `mysqld_safe` execution as `mysql`, and disabled symbolic links.
Aug 29, 2026