Recommended update for mariadb SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:1853-1 Final 1 1 2018-06-29T15:40:54Z current 2018-06-29T15:40:54Z 2018-06-29T15:40:54Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Recommended update for mariadb This MariaDB update to version 10.2.15 brings the following fixes and improvements. Security issues: - CVE-2018-2767: The embedded server library now supports SSL when connecting to remote servers (bsc#1088681). - Collected CVEs fixes: * 10.2.15: CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810, CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766, CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761, CVE-2018-2781, CVE-2018-2771, CVE-2018-2813 * 10.2.13: CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-2612 * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365 * 10.2.8: CVE-2017-3636, CVE-2017-3641, CVE-2017-3653, CVE-2017-10320, CVE-2017-10365, CVE-2017-10379, CVE-2017-10384, CVE-2017-10286, CVE-2017-3257 * 10.2.6: CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456, CVE-2017-3464 * 10.2.5: CVE-2017-3313, CVE-2017-3302 Bugfixes: - bsc#1092544: Update suse_skipped_tests.list and add tests that are failing with GCC 8. - bsc#1012075: MariaDB Test Suite issue with test sys_vars.secure_file_priv.test. - bsc#1019948: mariadb even tumbleweed version is super old. - bsc#1039034: no ODBC support in MariaDB Server. - bsc#1041891: Make mariadb tests pass and exclude failures. - bsc#1042632: Mariadb fails to build with openssl-1.1. - bsc#1043328: Update mariadb in TW to 10.2 and drop comat with mysql. - bsc#1047218: trackerbug: packages do not build reproducibly from including build time. - bsc#1055165: mariadb build with cassandra enabled. - bsc#1055268: MariaDB configurations are not overwritable. - bsc#1058374: Use bind-address directive and SSL section settings in default my.cnf. - bsc#1058729: MariaDB - mysql-test - connect.drop-open-error is failing (regression). - bsc#1060110: The mariadb install script depends on hostname but does not require it. - bsc#1062583: Stop using boost-devel. - bsc#1067443: incomplete revert of the mariadb service rename. - bsc#1068906: MariaDB: ALTER TABLE can't rename columns with CHECK constraints. - bsc#1069401: Database failed apply with mariadb 10.2 : RuntimeError: Galera cluster did not start after 600 seconds. - bsc#1080891: server:database/mariadb: up-streaming patches. - bsc#1083087: Galera bootstrap failes work after MariaDB 10.2.13 upgrade. - bsc#1082318: mariadb-connector-c.changes and xtrabackup need to use %doc instead of %license. Release notes and changelog: - https://mariadb.com/kb/en/library/mariadb-10215-release-notes - https://mariadb.com/kb/en/library/mariadb-10215-changelog The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-7-2018-1253 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ Link for SUSE-SU-2018:1853-1 https://lists.suse.com/pipermail/sle-security-updates/2018-June/004235.html E-Mail link for SUSE-SU-2018:1853-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1012075 SUSE Bug 1012075 https://bugzilla.suse.com/1019948 SUSE Bug 1019948 https://bugzilla.suse.com/1039034 SUSE Bug 1039034 https://bugzilla.suse.com/1041891 SUSE Bug 1041891 https://bugzilla.suse.com/1042632 SUSE Bug 1042632 https://bugzilla.suse.com/1043328 SUSE Bug 1043328 https://bugzilla.suse.com/1047218 SUSE Bug 1047218 https://bugzilla.suse.com/1055165 SUSE Bug 1055165 https://bugzilla.suse.com/1055268 SUSE Bug 1055268 https://bugzilla.suse.com/1058374 SUSE Bug 1058374 https://bugzilla.suse.com/1058729 SUSE Bug 1058729 https://bugzilla.suse.com/1060110 SUSE Bug 1060110 https://bugzilla.suse.com/1062583 SUSE Bug 1062583 https://bugzilla.suse.com/1067443 SUSE Bug 1067443 https://bugzilla.suse.com/1068906 SUSE Bug 1068906 https://bugzilla.suse.com/1069401 SUSE Bug 1069401 https://bugzilla.suse.com/1080891 SUSE Bug 1080891 https://bugzilla.suse.com/1082318 SUSE Bug 1082318 https://bugzilla.suse.com/1083087 SUSE Bug 1083087 https://bugzilla.suse.com/1088681 SUSE Bug 1088681 https://bugzilla.suse.com/1092544 SUSE Bug 1092544 https://bugzilla.suse.com/1093130 SUSE Bug 1093130 https://www.suse.com/security/cve/CVE-2017-10268/ SUSE CVE CVE-2017-10268 page https://www.suse.com/security/cve/CVE-2017-10286/ SUSE CVE CVE-2017-10286 page https://www.suse.com/security/cve/CVE-2017-10320/ SUSE CVE CVE-2017-10320 page https://www.suse.com/security/cve/CVE-2017-10365/ SUSE CVE CVE-2017-10365 page https://www.suse.com/security/cve/CVE-2017-10378/ SUSE CVE CVE-2017-10378 page https://www.suse.com/security/cve/CVE-2017-10379/ SUSE CVE CVE-2017-10379 page https://www.suse.com/security/cve/CVE-2017-10384/ SUSE CVE CVE-2017-10384 page https://www.suse.com/security/cve/CVE-2017-15365/ SUSE CVE CVE-2017-15365 page https://www.suse.com/security/cve/CVE-2017-3257/ SUSE CVE CVE-2017-3257 page https://www.suse.com/security/cve/CVE-2017-3302/ SUSE CVE CVE-2017-3302 page https://www.suse.com/security/cve/CVE-2017-3308/ SUSE CVE CVE-2017-3308 page https://www.suse.com/security/cve/CVE-2017-3309/ SUSE CVE CVE-2017-3309 page https://www.suse.com/security/cve/CVE-2017-3313/ SUSE CVE CVE-2017-3313 page https://www.suse.com/security/cve/CVE-2017-3453/ SUSE CVE CVE-2017-3453 page https://www.suse.com/security/cve/CVE-2017-3456/ SUSE CVE CVE-2017-3456 page https://www.suse.com/security/cve/CVE-2017-3464/ SUSE CVE CVE-2017-3464 page https://www.suse.com/security/cve/CVE-2017-3636/ SUSE CVE CVE-2017-3636 page https://www.suse.com/security/cve/CVE-2017-3641/ SUSE CVE CVE-2017-3641 page https://www.suse.com/security/cve/CVE-2017-3653/ SUSE CVE CVE-2017-3653 page https://www.suse.com/security/cve/CVE-2018-2562/ SUSE CVE CVE-2018-2562 page https://www.suse.com/security/cve/CVE-2018-2612/ SUSE CVE CVE-2018-2612 page https://www.suse.com/security/cve/CVE-2018-2622/ SUSE CVE CVE-2018-2622 page https://www.suse.com/security/cve/CVE-2018-2640/ SUSE CVE CVE-2018-2640 page https://www.suse.com/security/cve/CVE-2018-2665/ SUSE CVE CVE-2018-2665 page https://www.suse.com/security/cve/CVE-2018-2668/ SUSE CVE CVE-2018-2668 page https://www.suse.com/security/cve/CVE-2018-2755/ SUSE CVE CVE-2018-2755 page https://www.suse.com/security/cve/CVE-2018-2759/ SUSE CVE CVE-2018-2759 page https://www.suse.com/security/cve/CVE-2018-2761/ SUSE CVE CVE-2018-2761 page https://www.suse.com/security/cve/CVE-2018-2766/ SUSE CVE CVE-2018-2766 page https://www.suse.com/security/cve/CVE-2018-2767/ SUSE CVE CVE-2018-2767 page https://www.suse.com/security/cve/CVE-2018-2771/ SUSE CVE CVE-2018-2771 page https://www.suse.com/security/cve/CVE-2018-2777/ SUSE CVE CVE-2018-2777 page https://www.suse.com/security/cve/CVE-2018-2781/ SUSE CVE CVE-2018-2781 page https://www.suse.com/security/cve/CVE-2018-2782/ SUSE CVE CVE-2018-2782 page https://www.suse.com/security/cve/CVE-2018-2784/ SUSE CVE CVE-2018-2784 page https://www.suse.com/security/cve/CVE-2018-2786/ SUSE CVE CVE-2018-2786 page https://www.suse.com/security/cve/CVE-2018-2787/ SUSE CVE CVE-2018-2787 page https://www.suse.com/security/cve/CVE-2018-2810/ SUSE CVE CVE-2018-2810 page https://www.suse.com/security/cve/CVE-2018-2813/ SUSE CVE CVE-2018-2813 page https://www.suse.com/security/cve/CVE-2018-2817/ SUSE CVE CVE-2018-2817 page https://www.suse.com/security/cve/CVE-2018-2819/ SUSE CVE CVE-2018-2819 page SUSE OpenStack Cloud 7 galera-3-wsrep-provider-25.3.23-8.3 libmariadb3-3.0.3-1.3.3 mariadb-10.2.15-7.1 mariadb-client-10.2.15-7.1 mariadb-errormessages-10.2.15-7.1 mariadb-galera-10.2.15-7.1 mariadb-tools-10.2.15-7.1 ruby2.1-rubygem-mysql2-0.4.10-7.2 xtrabackup-2.4.10-5.3 galera-3-wsrep-provider-25.3.23-8.3 as a component of SUSE OpenStack Cloud 7 libmariadb3-3.0.3-1.3.3 as a component of SUSE OpenStack Cloud 7 mariadb-10.2.15-7.1 as a component of SUSE OpenStack Cloud 7 mariadb-client-10.2.15-7.1 as a component of SUSE OpenStack Cloud 7 mariadb-errormessages-10.2.15-7.1 as a component of SUSE OpenStack Cloud 7 mariadb-galera-10.2.15-7.1 as a component of SUSE OpenStack Cloud 7 mariadb-tools-10.2.15-7.1 as a component of SUSE OpenStack Cloud 7 ruby2.1-rubygem-mysql2-0.4.10-7.2 as a component of SUSE OpenStack Cloud 7 xtrabackup-2.4.10-5.3 as a component of SUSE OpenStack Cloud 7 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N). CVE-2017-10268 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 3.7 AV:L/AC:H/Au:M/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-10268.html CVE-2017-10268 https://bugzilla.suse.com/1064101 SUSE Bug 1064101 https://bugzilla.suse.com/1064119 SUSE Bug 1064119 https://bugzilla.suse.com/1076505 SUSE Bug 1076505 https://bugzilla.suse.com/1076506 SUSE Bug 1076506 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2017-10286 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important 4.6 AV:N/AC:H/Au:M/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-10286.html CVE-2017-10286 https://bugzilla.suse.com/1064107 SUSE Bug 1064107 https://bugzilla.suse.com/1064119 SUSE Bug 1064119 https://bugzilla.suse.com/1076506 SUSE Bug 1076506 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2017-10320 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important 5 AV:A/AC:L/Au:M/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-10320.html CVE-2017-10320 https://bugzilla.suse.com/1064113 SUSE Bug 1064113 https://bugzilla.suse.com/1064119 SUSE Bug 1064119 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L). CVE-2017-10365 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important 4.7 AV:N/AC:L/Au:M/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-10365.html CVE-2017-10365 https://bugzilla.suse.com/1064114 SUSE Bug 1064114 https://bugzilla.suse.com/1064119 SUSE Bug 1064119 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2017-10378 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-10378.html CVE-2017-10378 https://bugzilla.suse.com/1064115 SUSE Bug 1064115 https://bugzilla.suse.com/1064119 SUSE Bug 1064119 https://bugzilla.suse.com/1076505 SUSE Bug 1076505 https://bugzilla.suse.com/1076506 SUSE Bug 1076506 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). CVE-2017-10379 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-10379.html CVE-2017-10379 https://bugzilla.suse.com/1064116 SUSE Bug 1064116 https://bugzilla.suse.com/1064119 SUSE Bug 1064119 https://bugzilla.suse.com/1076506 SUSE Bug 1076506 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2017-10384 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-10384.html CVE-2017-10384 https://bugzilla.suse.com/1064117 SUSE Bug 1064117 https://bugzilla.suse.com/1064119 SUSE Bug 1064119 https://bugzilla.suse.com/1076506 SUSE Bug 1076506 sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking. CVE-2017-15365 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-15365.html CVE-2017-15365 https://bugzilla.suse.com/1072167 SUSE Bug 1072167 https://bugzilla.suse.com/1076506 SUSE Bug 1076506 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts). CVE-2017-3257 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3257.html CVE-2017-3257 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020878 SUSE Bug 1020878 Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3. CVE-2017-3302 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3302.html CVE-2017-3302 https://bugzilla.suse.com/1022428 SUSE Bug 1022428 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1034911 SUSE Bug 1034911 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). CVE-2017-3308 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 2.1 AV:N/AC:H/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3308.html CVE-2017-3308 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). CVE-2017-3309 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 2.1 AV:N/AC:H/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3309.html CVE-2017-3309 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts). CVE-2017-3313 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 low 3.8 AV:L/AC:H/Au:S/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3313.html CVE-2017-3313 https://bugzilla.suse.com/1020868 SUSE Bug 1020868 https://bugzilla.suse.com/1020890 SUSE Bug 1020890 https://bugzilla.suse.com/1034911 SUSE Bug 1034911 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2017-3453 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 2.1 AV:N/AC:H/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3453.html CVE-2017-3453 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2017-3456 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 2.1 AV:N/AC:H/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3456.html CVE-2017-3456 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). CVE-2017-3464 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 2.1 AV:N/AC:H/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3464.html CVE-2017-3464 https://bugzilla.suse.com/1034850 SUSE Bug 1034850 https://bugzilla.suse.com/1048715 SUSE Bug 1048715 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). CVE-2017-3636 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 4.3 AV:L/AC:L/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3636.html CVE-2017-3636 https://bugzilla.suse.com/1049399 SUSE Bug 1049399 https://bugzilla.suse.com/1049422 SUSE Bug 1049422 https://bugzilla.suse.com/1054591 SUSE Bug 1054591 https://bugzilla.suse.com/1076506 SUSE Bug 1076506 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2017-3641 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3641.html CVE-2017-3641 https://bugzilla.suse.com/1049404 SUSE Bug 1049404 https://bugzilla.suse.com/1049422 SUSE Bug 1049422 https://bugzilla.suse.com/1054591 SUSE Bug 1054591 https://bugzilla.suse.com/1076506 SUSE Bug 1076506 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N). CVE-2017-3653 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 low 2.1 AV:N/AC:H/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2017-3653.html CVE-2017-3653 https://bugzilla.suse.com/1049417 SUSE Bug 1049417 https://bugzilla.suse.com/1049422 SUSE Bug 1049422 https://bugzilla.suse.com/1054591 SUSE Bug 1054591 https://bugzilla.suse.com/1076506 SUSE Bug 1076506 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H). CVE-2018-2562 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2562.html CVE-2018-2562 https://bugzilla.suse.com/1076369 SUSE Bug 1076369 https://bugzilla.suse.com/1078431 SUSE Bug 1078431 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H). CVE-2018-2612 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2612.html CVE-2018-2612 https://bugzilla.suse.com/1076369 SUSE Bug 1076369 https://bugzilla.suse.com/1078431 SUSE Bug 1078431 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2622 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2622.html CVE-2018-2622 https://bugzilla.suse.com/1076369 SUSE Bug 1076369 https://bugzilla.suse.com/1078431 SUSE Bug 1078431 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2640 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2640.html CVE-2018-2640 https://bugzilla.suse.com/1076369 SUSE Bug 1076369 https://bugzilla.suse.com/1078431 SUSE Bug 1078431 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2665 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2665.html CVE-2018-2665 https://bugzilla.suse.com/1076369 SUSE Bug 1076369 https://bugzilla.suse.com/1078431 SUSE Bug 1078431 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2668 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2668.html CVE-2018-2668 https://bugzilla.suse.com/1076369 SUSE Bug 1076369 https://bugzilla.suse.com/1078431 SUSE Bug 1078431 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-2755 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2755.html CVE-2018-2755 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2759 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2759.html CVE-2018-2759 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2761 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2761.html CVE-2018-2761 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2766 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2766.html CVE-2018-2766 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N). CVE-2018-2767 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2767.html CVE-2018-2767 https://bugzilla.suse.com/1088681 SUSE Bug 1088681 https://bugzilla.suse.com/1101675 SUSE Bug 1101675 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2771 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2771.html CVE-2018-2771 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2777 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2777.html CVE-2018-2777 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2781 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2781.html CVE-2018-2781 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2782 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2782.html CVE-2018-2782 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2784 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2784.html CVE-2018-2784 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). CVE-2018-2786 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2786.html CVE-2018-2786 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). CVE-2018-2787 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2787.html CVE-2018-2787 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2810 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2810.html CVE-2018-2810 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). CVE-2018-2813 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2813.html CVE-2018-2813 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2817 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2817.html CVE-2018-2817 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2819 SUSE OpenStack Cloud 7:galera-3-wsrep-provider-25.3.23-8.3 SUSE OpenStack Cloud 7:libmariadb3-3.0.3-1.3.3 SUSE OpenStack Cloud 7:mariadb-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-client-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-errormessages-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-galera-10.2.15-7.1 SUSE OpenStack Cloud 7:mariadb-tools-10.2.15-7.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-mysql2-0.4.10-7.2 SUSE OpenStack Cloud 7:xtrabackup-2.4.10-5.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181853-1/ https://www.suse.com/security/cve/CVE-2018-2819.html CVE-2018-2819 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518