Loading story…
Red Hat released RHSA-2015:0116, RHSA-2015:0117, and RHSA-2015:0118 to upgrade MySQL and MariaDB packages to version 5.5.41 and remediate seven vulnerabilities inherited from Oracle’s January 2015 Critical Patch Update. Affected deployments include Red Hat Enterprise Linux 7 MariaDB installations and Red Hat Software Collections 1 MySQL/MariaDB installations on RHEL 6 and 7, including applicable RHUI Server variants.
The flaws affect InnoDB DML and foreign-key handling, privilege management, replication, DDL, and encryption functionality. Included issues such as CVE-2014-6568 could allow an authenticated remote user to cause partial service-availability impact, while CVE-2015-0374 could expose confidential information through Server Security, Privileges, and Foreign Key functionality. Red Hat advised affected users to install the updated packages; the mysqld service restarts automatically after installation.
See real exploitation activity before you spend the cycle.
7 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2015:1628, fixing the affected mysql55-mysql component for Red Hat Enterprise Linux 5, including fixes for CVE-2014-6568 and CVE-2015-0374.
Red Hat released RHBA-2015:0825 to fix the affected mariadb-galera component in Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 7.
RHBA-2015:0820 fixed affected Ceph, MariaDB Galera, OpenStack utility, and Python components in Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 6.
Red Hat issued Moderate-severity RHSA-2015:0117 for mariadb55-mariadb in Red Hat Software Collections 1, upgrading MariaDB to 5.5.41 and fixing seven vulnerabilities affecting applicable RHEL 6 and 7 systems.
Red Hat issued Moderate-severity RHSA-2015:0118, upgrading RHEL 7 MariaDB packages to version 5.5.41 and remediating seven MySQL-derived vulnerabilities, including CVE-2014-6568 and CVE-2015-0374.
Red Hat issued Moderate-severity RHSA-2015:0116 for mysql55-mysql in Red Hat Software Collections 1, upgrading MySQL to 5.5.41 and fixing seven MySQL vulnerabilities for affected RHEL 6 and 7 deployments.
Oracle's January 2015 Critical Patch Update included the MySQL vulnerabilities later tracked as CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, and CVE-2015-0432.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
10 references tracked. Mallory keeps watching after this page renders.
rhn.redhat.com
Open sourcerhn.redhat.com
Open sourcerhn.redhat.com
Open sourceaccess.redhat.com
Open sourceredhat.com
Open sourceredhat.com
Open sourceredhat.com
Open sourceredhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Important updates for MySQL and MariaDB packages in Red Hat Software Collections, addressing the configuration-file injection flaw **CVE-2016-6662**, MyISAM repair race conditions **CVE-2016-6663/CVE-2016-5616**, and insecure `mysqld_safe` error-log handling tracked as **CVE-2016-6664/CVE-2016-5617**. Depending on configuration, attackers with database privileges, `FILE` access, or local shell access could write option files, manipulate files writable by the `mysql` account, or exploit symlink and log-path handling to obtain elevated execution; root-level impact depended on `mysqld_safe` and file-permission configuration. The updates also remediate remotely reachable denial-of-service flaws **CVE-2016-3492** and **CVE-2016-5612**, which allow low-privileged network attackers to hang or repeatedly crash affected MySQL servers, alongside additional Oracle CPU vulnerabilities. Affected Software Collections deployments should install the applicable updated packages—`mysql55-mysql` 5.5.52, `mariadb55-mariadb` 5.5.53, `rh-mysql56-mysql` 5.6.34, or `rh-mariadb100-mariadb` 10.0.28 or later; installation automatically restarts `mysqld`. Red Hat noted that default RHEL configurations reduce exposure to several escalation paths through root-owned configuration files, `mysqld_safe` execution as `mysql`, and disabled symbolic links.
Aug 29, 2026
Red Hat released MySQL security updates for Red Hat Enterprise Linux and Red Hat Software Collections, upgrading `mysql55-mysql` to 5.5.45 and `rh-mysql56-mysql` to 5.6.26. The advisories incorporate fixes from Oracle’s January, April, and July 2015 Critical Patch Updates, remediating 15 CVEs in the MySQL 5.5 Software Collections stream and 18 CVEs in the MySQL 5.6 stream; Red Hat rated the 5.5 updates Moderate and the 5.6 update Important. The flaws include unauthenticated network denial of service in replication (`CVE-2015-0382`), authenticated unauthorized read access through the security-privileges component (`CVE-2015-2620`), and authenticated denial-of-service conditions in DML, Optimizer, DDL, and InnoDB foreign-key processing, including `CVE-2015-2648`, `CVE-2015-2643`, `CVE-2015-0505`, and `CVE-2015-0432`. Affected systems should apply the relevant packages; the `mysqld` service restarts automatically after installation.
Aug 29, 2026
Red Hat released **RHSA-2016:1601** to upgrade `rh-mysql56-mysql` to MySQL 5.6.32 on supported RHEL 6 and RHEL 7 x86_64 Server and Workstation systems using Red Hat Software Collections. The update remediates vulnerabilities across InnoDB, Parser, Full-Text Search, Optimizer, Types, encryption, DML, privileges, and replication components. Several flaws—including `CVE-2016-3501`, `CVE-2016-3486`, `CVE-2016-3521`, `CVE-2016-3614`, and `CVE-2016-5609`—could allow authenticated network attackers, often with low privileges, to repeatedly crash or hang MySQL and cause denial of service; `CVE-2016-3477` also carried confidentiality and integrity risk. Red Hat also shipped **RHSA-2016:1603** and **RHSA-2016:1637**, upgrading Software Collections MariaDB packages to 5.5.50 and 10.1.16, respectively, to address `CVE-2016-3477`, `CVE-2016-3521`, `CVE-2016-3615`, and `CVE-2016-5440`. Organizations running the affected Software Collections MySQL or MariaDB deployments should install the applicable errata and account for the automatic restart of the `mysqld` daemon; native RHEL MySQL/MariaDB packages listed by Red Hat as not affected do not require these specific updates.
Aug 29, 2026