Linux · Ubuntu · Package update · July 23, 2019

mysql-server 5.7.19-0ubuntu1: mysql-server 5.7.19-0ubuntu1 for Ubuntu 18.04.6 LTS (bionic)

mysql-server 5.7.19-0ubuntu1, released July 23, 2019, fixes 21 CVEs in mysql-server. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
21
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0323
88th percentile

Priority of the 21 CVEs

Patch now 0 Urgent 0 High 0 Routine 21

Fixed package versions

ProductReleaseFixed in
mysql-serverUbuntu 18.04.6 LTS (bionic)5.7.19-0ubuntu1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2017-3641 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)n/a 0.0323 None reported
Routine CVE-2017-3634 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)n/a 0.0299 None reported
Routine CVE-2017-3633 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)n/a 0.0295 None reported
Routine CVE-2017-3647 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)n/a 0.0281 None reported
Routine CVE-2017-3648 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets)n/a 0.0276 None reported
Routine CVE-2017-3638 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)n/a 0.0276 None reported
Routine CVE-2017-3642 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)n/a 0.0276 None reported
Routine CVE-2017-3649 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)n/a 0.0270 None reported
Routine CVE-2017-3650 mysql-source-5.7: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API)n/a 0.0250 None reported
Routine CVE-2017-3639 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)n/a 0.0245 None reported
Routine CVE-2017-3640 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)n/a 0.0245 None reported
Routine CVE-2017-3643 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)n/a 0.0245 None reported
Routine CVE-2017-3644 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)n/a 0.0245 None reported
Routine CVE-2017-3645 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)n/a 0.0245 None reported
Routine CVE-2017-3651 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump)n/a 0.0215 None reported
Routine CVE-2017-3635 libmysqlclient20: Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/C)n/a 0.0203 None reported
Routine CVE-2017-3529 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF)n/a 0.0201 None reported
Routine CVE-2017-3637 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin)n/a 0.0200 None reported
Routine CVE-2017-3653 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)n/a 0.0189 None reported
Routine CVE-2017-3652 libmysqlclient20: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)n/a 0.0154 None reported
Routine CVE-2019-2730 mysql-client-5.7: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges)n/a 0.0144 None reported
Showing 1 to 21 of 21 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.