Security update for MySQL SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1177-2 Final 1 1 2012-12-27T16:15:49Z current 2012-12-27T16:15:49Z 2012-12-27T16:15:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for MySQL A stack-based buffer overflow in MySQL has been fixed that could have caused a Denial of Service or potentially allowed the execution of arbitrary code (CVE-2012-5611). Security Issue references: * CVE-2012-5615 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615> * CVE-2012-5615 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615> * CVE-2012-5613 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5613> * CVE-2012-5612 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5612> * CVE-2012-5611 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5611> The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slessp1-libmysqlclient-devel,slessp2-libmysqlclient-devel Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151177-2/ Link for SUSE-SU-2015:1177-2 https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00024.html E-Mail link for SUSE-SU-2015:1177-2 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/792444 SUSE Bug 792444 https://bugzilla.suse.com/934789 SUSE Bug 934789 https://www.suse.com/security/cve/CVE-2012-5611/ SUSE CVE CVE-2012-5611 page https://www.suse.com/security/cve/CVE-2012-5612/ SUSE CVE CVE-2012-5612 page https://www.suse.com/security/cve/CVE-2012-5613/ SUSE CVE CVE-2012-5613 page https://www.suse.com/security/cve/CVE-2012-5615/ SUSE CVE CVE-2012-5615 page https://www.suse.com/security/cve/CVE-2015-4000/ SUSE CVE CVE-2015-4000 page SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 11 SP2 libmysqlclient15-5.0.96-0.6.1 libmysqlclient15-32bit-5.0.96-0.6.1 libmysqlclient_r15-5.0.96-0.6.1 mysql-5.0.96-0.6.1 mysql-Max-5.0.96-0.6.1 mysql-client-5.0.96-0.6.1 mysql-tools-5.0.96-0.6.1 libmysqlclient15-x86-5.0.96-0.6.1 libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS libmysqlclient15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS mysql-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS mysql-Max-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS mysql-client-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS mysql-tools-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libmysqlclient15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-Max-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-client-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mysql-tools-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient15-x86-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-Max-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-client-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 mysql-tools-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2 libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libmysqlclient15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libmysqlclient15-x86-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS mysql-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS mysql-Max-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS mysql-client-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS mysql-tools-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS libmysqlclient15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 libmysqlclient15-32bit-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 libmysqlclient15-x86-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 libmysqlclient_r15-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 mysql-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 mysql-Max-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 mysql-client-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 mysql-tools-5.0.96-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command. CVE-2012-5611 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-tools-5.0.96-0.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151177-2/ https://www.suse.com/security/cve/CVE-2012-5611.html CVE-2012-5611 https://bugzilla.suse.com/792362 SUSE Bug 792362 https://bugzilla.suse.com/792444 SUSE Bug 792444 https://bugzilla.suse.com/798753 SUSE Bug 798753 Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands. CVE-2012-5612 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-tools-5.0.96-0.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151177-2/ https://www.suse.com/security/cve/CVE-2012-5612.html CVE-2012-5612 https://bugzilla.suse.com/792443 SUSE Bug 792443 https://bugzilla.suse.com/798753 SUSE Bug 798753 ** DISPUTED ** MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL administrator. NOTE: the vendor disputes this issue, stating that this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: it could be argued that this should not be included in CVE because it is a configuration issue. CVE-2012-5613 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-tools-5.0.96-0.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151177-2/ https://www.suse.com/security/cve/CVE-2012-5613.html CVE-2012-5613 https://bugzilla.suse.com/792442 SUSE Bug 792442 Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames. CVE-2012-5615 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-tools-5.0.96-0.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151177-2/ https://www.suse.com/security/cve/CVE-2012-5615.html CVE-2012-5615 https://bugzilla.suse.com/792440 SUSE Bug 792440 https://bugzilla.suse.com/901237 SUSE Bug 901237 https://bugzilla.suse.com/915913 SUSE Bug 915913 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue. CVE-2015-4000 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2-LTSS:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server 11 SP2:mysql-tools-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-32bit-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient15-x86-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:libmysqlclient_r15-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-Max-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-client-5.0.96-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:mysql-tools-5.0.96-0.6.1 important 7.3 AV:N/AC:H/Au:N/C:C/I:C/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151177-2/ https://www.suse.com/security/cve/CVE-2015-4000.html CVE-2015-4000 https://bugzilla.suse.com/1074631 SUSE Bug 1074631 https://bugzilla.suse.com/1211968 SUSE Bug 1211968 https://bugzilla.suse.com/931600 SUSE Bug 931600 https://bugzilla.suse.com/931698 SUSE Bug 931698 https://bugzilla.suse.com/931723 SUSE Bug 931723 https://bugzilla.suse.com/931845 SUSE Bug 931845 https://bugzilla.suse.com/932026 SUSE Bug 932026 https://bugzilla.suse.com/932483 SUSE Bug 932483 https://bugzilla.suse.com/934789 SUSE Bug 934789 https://bugzilla.suse.com/935033 SUSE Bug 935033 https://bugzilla.suse.com/935540 SUSE Bug 935540 https://bugzilla.suse.com/935979 SUSE Bug 935979 https://bugzilla.suse.com/937202 SUSE Bug 937202 https://bugzilla.suse.com/937766 SUSE Bug 937766 https://bugzilla.suse.com/938248 SUSE Bug 938248 https://bugzilla.suse.com/938432 SUSE Bug 938432 https://bugzilla.suse.com/938895 SUSE Bug 938895 https://bugzilla.suse.com/938905 SUSE Bug 938905 https://bugzilla.suse.com/938906 SUSE Bug 938906 https://bugzilla.suse.com/938913 SUSE Bug 938913 https://bugzilla.suse.com/938945 SUSE Bug 938945 https://bugzilla.suse.com/943664 SUSE Bug 943664 https://bugzilla.suse.com/944729 SUSE Bug 944729 https://bugzilla.suse.com/945582 SUSE Bug 945582 https://bugzilla.suse.com/955589 SUSE Bug 955589 https://bugzilla.suse.com/980406 SUSE Bug 980406 https://bugzilla.suse.com/990592 SUSE Bug 990592 https://bugzilla.suse.com/994144 SUSE Bug 994144