Security update for mysql SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:2343-1 Final 1 1 2016-09-20T14:55:34Z current 2016-09-20T14:55:34Z 2016-09-20T14:55:34Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mysql This mysql update to verson 5.5.52 fixes the following issues: Security issues fixed: - CVE-2016-3477: Fixed unspecified vulnerability in subcomponent parser (bsc#989913). - CVE-2016-3521: Fixed unspecified vulnerability in subcomponent types (bsc#989919). - CVE-2016-3615: Fixed unspecified vulnerability in subcomponent dml (bsc#989922). - CVE-2016-5440: Fixed unspecified vulnerability in subcomponent rbr (bsc#989926). - CVE-2016-6662: A malicious user with SQL and filesystem access could create a my.cnf in the datadir and , under certain circumstances, execute arbitrary code as mysql (or even root) user. (bsc#998309) More details can be found on: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-51.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-50.html Bugs fixed: - bsc#967374: properly restart mysql multi instances during upgrade - bnc#937258: multi script to restart after crash The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-mysql-12752,sleclo50sp3-mysql-12752,sleman21-mysql-12752,slemap21-mysql-12752,sleposp3-mysql-12752,slessp3-mysql-12752,slessp4-mysql-12752 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/ Link for SUSE-SU-2016:2343-1 https://lists.opensuse.org/opensuse-security-announce/2016-09/msg00016.html E-Mail link for SUSE-SU-2016:2343-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/937258 SUSE Bug 937258 https://bugzilla.suse.com/967374 SUSE Bug 967374 https://bugzilla.suse.com/989913 SUSE Bug 989913 https://bugzilla.suse.com/989919 SUSE Bug 989919 https://bugzilla.suse.com/989922 SUSE Bug 989922 https://bugzilla.suse.com/989926 SUSE Bug 989926 https://bugzilla.suse.com/998309 SUSE Bug 998309 https://www.suse.com/security/cve/CVE-2016-3477/ SUSE CVE CVE-2016-3477 page https://www.suse.com/security/cve/CVE-2016-3521/ SUSE CVE CVE-2016-3521 page https://www.suse.com/security/cve/CVE-2016-3615/ SUSE CVE CVE-2016-3615 page https://www.suse.com/security/cve/CVE-2016-5440/ SUSE CVE CVE-2016-5440 page https://www.suse.com/security/cve/CVE-2016-6662/ SUSE CVE CVE-2016-6662 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Manager 2.1 SUSE Manager Proxy 2.1 SUSE OpenStack Cloud 5 libmysql55client_r18-32bit-5.5.52-0.27.1 libmysql55client_r18-x86-5.5.52-0.27.1 libmysql55client18-5.5.52-0.27.1 libmysql55client18-32bit-5.5.52-0.27.1 libmysql55client_r18-5.5.52-0.27.1 mysql-5.5.52-0.27.1 mysql-client-5.5.52-0.27.1 mysql-tools-5.5.52-0.27.1 libmysql55client18-x86-5.5.52-0.27.1 libmysql55client18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 mysql-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 mysql-client-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 mysql-tools-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 libmysql55client18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS mysql-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS mysql-client-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS mysql-tools-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libmysql55client18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mysql-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mysql-client-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mysql-tools-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libmysql55client18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client18-x86-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-x86-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-client-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-tools-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client18-x86-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client_r18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client_r18-x86-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 mysql-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 mysql-client-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 mysql-tools-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client_r18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysql55client_r18-x86-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysql55client18-5.5.52-0.27.1 as a component of SUSE Manager 2.1 libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Manager 2.1 libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Manager 2.1 mysql-5.5.52-0.27.1 as a component of SUSE Manager 2.1 mysql-client-5.5.52-0.27.1 as a component of SUSE Manager 2.1 mysql-tools-5.5.52-0.27.1 as a component of SUSE Manager 2.1 libmysql55client18-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1 libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1 libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1 mysql-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1 mysql-client-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1 mysql-tools-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1 libmysql55client18-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5 libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5 libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5 mysql-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5 mysql-client-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5 mysql-tools-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5 Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser. CVE-2016-3477 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1 SUSE Manager 2.1:mysql-5.5.52-0.27.1 SUSE Manager 2.1:mysql-client-5.5.52-0.27.1 SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1 important 7.1 AV:N/AC:H/Au:S/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/ https://www.suse.com/security/cve/CVE-2016-3477.html CVE-2016-3477 https://bugzilla.suse.com/989913 SUSE Bug 989913 https://bugzilla.suse.com/991616 SUSE Bug 991616 Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types. CVE-2016-3521 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1 SUSE Manager 2.1:mysql-5.5.52-0.27.1 SUSE Manager 2.1:mysql-client-5.5.52-0.27.1 SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1 important 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/ https://www.suse.com/security/cve/CVE-2016-3521.html CVE-2016-3521 https://bugzilla.suse.com/989919 SUSE Bug 989919 https://bugzilla.suse.com/991616 SUSE Bug 991616 Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML. CVE-2016-3615 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1 SUSE Manager 2.1:mysql-5.5.52-0.27.1 SUSE Manager 2.1:mysql-client-5.5.52-0.27.1 SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1 moderate 4.9 AV:N/AC:H/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/ https://www.suse.com/security/cve/CVE-2016-3615.html CVE-2016-3615 https://bugzilla.suse.com/989922 SUSE Bug 989922 https://bugzilla.suse.com/991616 SUSE Bug 991616 Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR. CVE-2016-5440 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1 SUSE Manager 2.1:mysql-5.5.52-0.27.1 SUSE Manager 2.1:mysql-client-5.5.52-0.27.1 SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/ https://www.suse.com/security/cve/CVE-2016-5440.html CVE-2016-5440 https://bugzilla.suse.com/989926 SUSE Bug 989926 https://bugzilla.suse.com/991616 SUSE Bug 991616 Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15. CVE-2016-6662 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1 SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1 SUSE Manager 2.1:mysql-5.5.52-0.27.1 SUSE Manager 2.1:mysql-client-5.5.52-0.27.1 SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1 SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1 SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1 SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1 SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1 important 8.5 AV:N/AC:M/Au:S/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/ https://www.suse.com/security/cve/CVE-2016-6662.html CVE-2016-6662 https://bugzilla.suse.com/1001367 SUSE Bug 1001367 https://bugzilla.suse.com/1005580 SUSE Bug 1005580 https://bugzilla.suse.com/1020873 SUSE Bug 1020873 https://bugzilla.suse.com/1020884 SUSE Bug 1020884 https://bugzilla.suse.com/1021755 SUSE Bug 1021755 https://bugzilla.suse.com/998309 SUSE Bug 998309