Security update for mariadb SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1273-1 Final 1 1 2015-07-21T11:08:14Z current 2015-07-21T11:08:14Z 2015-07-21T11:08:14Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mariadb This update fixes the following security issues: * Logjam attack: mysql uses 512 bit dh groups in SSL [bnc#934789] * CVE-2015-3152: mysql --ssl does not enforce SSL [bnc#924663] * CVE-2014-8964: heap buffer overflow [bnc#906574] * CVE-2015-2325: heap buffer overflow in compile_branch() [bnc#924960] * CVE-2015-2326: heap buffer overflow in pcre_compile2() [bnc#924961] * CVE-2015-0501: unspecified vulnerability related to Server:Compiling (CPU April 2015) * CVE-2015-2571: unspecified vulnerability related to Server:Optimizer (CPU April 2015) * CVE-2015-0505: unspecified vulnerability related to Server:DDL (CPU April 2015) * CVE-2015-0499: unspecified vulnerability related to Server:Federated (CPU April 2015) * CVE-2015-2568: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015) * CVE-2015-2573: unspecified vulnerability related to Server:DDL (CPU April 2015) * CVE-2015-0433: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015) * CVE-2015-0441: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-332,SUSE-SLE-SDK-12-2015-332,SUSE-SLE-SERVER-12-2015-332,SUSE-SLE-WE-12-2015-332 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ Link for SUSE-SU-2015:1273-1 https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00036.html E-Mail link for SUSE-SU-2015:1273-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/906574 SUSE Bug 906574 https://bugzilla.suse.com/919053 SUSE Bug 919053 https://bugzilla.suse.com/919062 SUSE Bug 919062 https://bugzilla.suse.com/920865 SUSE Bug 920865 https://bugzilla.suse.com/920896 SUSE Bug 920896 https://bugzilla.suse.com/921333 SUSE Bug 921333 https://bugzilla.suse.com/924663 SUSE Bug 924663 https://bugzilla.suse.com/924960 SUSE Bug 924960 https://bugzilla.suse.com/924961 SUSE Bug 924961 https://bugzilla.suse.com/934789 SUSE Bug 934789 https://bugzilla.suse.com/936407 SUSE Bug 936407 https://bugzilla.suse.com/936408 SUSE Bug 936408 https://bugzilla.suse.com/936409 SUSE Bug 936409 https://www.suse.com/security/cve/CVE-2014-8964/ SUSE CVE CVE-2014-8964 page https://www.suse.com/security/cve/CVE-2015-0433/ SUSE CVE CVE-2015-0433 page https://www.suse.com/security/cve/CVE-2015-0441/ SUSE CVE CVE-2015-0441 page https://www.suse.com/security/cve/CVE-2015-0499/ SUSE CVE CVE-2015-0499 page https://www.suse.com/security/cve/CVE-2015-0501/ SUSE CVE CVE-2015-0501 page https://www.suse.com/security/cve/CVE-2015-0505/ SUSE CVE CVE-2015-0505 page https://www.suse.com/security/cve/CVE-2015-2325/ SUSE CVE CVE-2015-2325 page https://www.suse.com/security/cve/CVE-2015-2326/ SUSE CVE CVE-2015-2326 page https://www.suse.com/security/cve/CVE-2015-2568/ SUSE CVE CVE-2015-2568 page https://www.suse.com/security/cve/CVE-2015-2571/ SUSE CVE CVE-2015-2571 page https://www.suse.com/security/cve/CVE-2015-2573/ SUSE CVE CVE-2015-2573 page https://www.suse.com/security/cve/CVE-2015-3152/ SUSE CVE CVE-2015-3152 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Workstation Extension 12 libmysqlclient18-10.0.20-18.1 libmysqlclient18-32bit-10.0.20-18.1 libmysqlclient_r18-10.0.20-18.1 libmysqlclient_r18-32bit-10.0.20-18.1 mariadb-10.0.20-18.1 mariadb-client-10.0.20-18.1 mariadb-errormessages-10.0.20-18.1 libmysqlclient-devel-10.0.20-18.1 libmysqld-devel-10.0.20-18.1 libmysqld18-10.0.20-18.1 mariadb-tools-10.0.20-18.1 libmysqlclient18-10.0.20-18.1 as a component of SUSE Linux Enterprise Desktop 12 libmysqlclient18-32bit-10.0.20-18.1 as a component of SUSE Linux Enterprise Desktop 12 libmysqlclient_r18-10.0.20-18.1 as a component of SUSE Linux Enterprise Desktop 12 libmysqlclient_r18-32bit-10.0.20-18.1 as a component of SUSE Linux Enterprise Desktop 12 mariadb-10.0.20-18.1 as a component of SUSE Linux Enterprise Desktop 12 mariadb-client-10.0.20-18.1 as a component of SUSE Linux Enterprise Desktop 12 mariadb-errormessages-10.0.20-18.1 as a component of SUSE Linux Enterprise Desktop 12 libmysqlclient18-10.0.20-18.1 as a component of SUSE Linux Enterprise Server 12 libmysqlclient18-32bit-10.0.20-18.1 as a component of SUSE Linux Enterprise Server 12 mariadb-10.0.20-18.1 as a component of SUSE Linux Enterprise Server 12 mariadb-client-10.0.20-18.1 as a component of SUSE Linux Enterprise Server 12 mariadb-errormessages-10.0.20-18.1 as a component of SUSE Linux Enterprise Server 12 mariadb-tools-10.0.20-18.1 as a component of SUSE Linux Enterprise Server 12 libmysqlclient18-10.0.20-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libmysqlclient18-32bit-10.0.20-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 mariadb-10.0.20-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 mariadb-client-10.0.20-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 mariadb-errormessages-10.0.20-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 mariadb-tools-10.0.20-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libmysqlclient-devel-10.0.20-18.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libmysqlclient_r18-10.0.20-18.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libmysqld-devel-10.0.20-18.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libmysqld18-10.0.20-18.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libmysqlclient_r18-10.0.20-18.1 as a component of SUSE Linux Enterprise Workstation Extension 12 libmysqlclient_r18-32bit-10.0.20-18.1 as a component of SUSE Linux Enterprise Workstation Extension 12 Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats. CVE-2014-8964 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2014-8964.html CVE-2014-8964 https://bugzilla.suse.com/906574 SUSE Bug 906574 https://bugzilla.suse.com/924960 SUSE Bug 924960 https://bugzilla.suse.com/933288 SUSE Bug 933288 https://bugzilla.suse.com/936408 SUSE Bug 936408 https://bugzilla.suse.com/958373 SUSE Bug 958373 Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML. CVE-2015-0433 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-0433.html CVE-2015-0433 https://bugzilla.suse.com/927623 SUSE Bug 927623 https://bugzilla.suse.com/936409 SUSE Bug 936409 Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Encryption. CVE-2015-0441 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-0441.html CVE-2015-0441 https://bugzilla.suse.com/927623 SUSE Bug 927623 https://bugzilla.suse.com/936409 SUSE Bug 936409 Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Federated. CVE-2015-0499 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-0499.html CVE-2015-0499 https://bugzilla.suse.com/927623 SUSE Bug 927623 https://bugzilla.suse.com/936408 SUSE Bug 936408 Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling. CVE-2015-0501 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-0501.html CVE-2015-0501 https://bugzilla.suse.com/927623 SUSE Bug 927623 https://bugzilla.suse.com/936408 SUSE Bug 936408 Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL. CVE-2015-0505 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-0505.html CVE-2015-0505 https://bugzilla.suse.com/927623 SUSE Bug 927623 https://bugzilla.suse.com/936408 SUSE Bug 936408 The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier. CVE-2015-2325 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-2325.html CVE-2015-2325 https://bugzilla.suse.com/924960 SUSE Bug 924960 https://bugzilla.suse.com/933288 SUSE Bug 933288 https://bugzilla.suse.com/936408 SUSE Bug 936408 https://bugzilla.suse.com/958373 SUSE Bug 958373 The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by "((?+1)(\1))/". CVE-2015-2326 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-2326.html CVE-2015-2326 https://bugzilla.suse.com/924960 SUSE Bug 924960 https://bugzilla.suse.com/924961 SUSE Bug 924961 https://bugzilla.suse.com/933288 SUSE Bug 933288 https://bugzilla.suse.com/936408 SUSE Bug 936408 https://bugzilla.suse.com/958373 SUSE Bug 958373 Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges. CVE-2015-2568 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-2568.html CVE-2015-2568 https://bugzilla.suse.com/927623 SUSE Bug 927623 https://bugzilla.suse.com/936409 SUSE Bug 936409 Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer. CVE-2015-2571 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-2571.html CVE-2015-2571 https://bugzilla.suse.com/927623 SUSE Bug 927623 https://bugzilla.suse.com/936408 SUSE Bug 936408 Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL. CVE-2015-2573 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-2573.html CVE-2015-2573 https://bugzilla.suse.com/927623 SUSE Bug 927623 https://bugzilla.suse.com/936409 SUSE Bug 936409 Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack. CVE-2015-3152 SUSE Linux Enterprise Desktop 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:libmysqlclient_r18-32bit-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Desktop 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:libmysqlclient18-32bit-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-client-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-errormessages-10.0.20-18.1 SUSE Linux Enterprise Server for SAP Applications 12:mariadb-tools-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld-devel-10.0.20-18.1 SUSE Linux Enterprise Software Development Kit 12:libmysqld18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-10.0.20-18.1 SUSE Linux Enterprise Workstation Extension 12:libmysqlclient_r18-32bit-10.0.20-18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/ https://www.suse.com/security/cve/CVE-2015-3152.html CVE-2015-3152 https://bugzilla.suse.com/1037590 SUSE Bug 1037590 https://bugzilla.suse.com/1047059 SUSE Bug 1047059 https://bugzilla.suse.com/1088681 SUSE Bug 1088681 https://bugzilla.suse.com/924663 SUSE Bug 924663 https://bugzilla.suse.com/928962 SUSE Bug 928962 https://bugzilla.suse.com/936407 SUSE Bug 936407