Security update for mysql SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:3542-1 Final 1 1 2018-10-29T05:47:55Z current 2018-10-29T05:47:55Z 2018-10-29T05:47:55Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mysql MySQL server was updated to version 5.5.62, fixing bugs and security issues. Changes: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-62.html Following security issues were fixed: - CVE-2016-9843: The crc32_big function in zlib might have allowed context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation. (bsc#1013882) Please note that SUSE uses the system zlib, not the embedded copy. - CVE-2018-3133: Authenticated low privilege attackers could cause denial of service attacks (hangs or crashes) against the mysql server (bsc#1112369) - CVE-2018-3174: Authenticated high privilege attackers could cause denial of service attacks (hangs or crashes) against the mysql server (bsc#1112368) - CVE-2018-3282: Authenticated high privilege attackers could cause denial of service attacks (hangs or crashes) against the mysql server (bsc#1112432) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-mysql-13849,sleposp3-mysql-13849,slessp3-mysql-13849,slessp4-mysql-13849 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20183542-1/ Link for SUSE-SU-2018:3542-1 https://lists.suse.com/pipermail/sle-security-updates/2018-October/004805.html E-Mail link for SUSE-SU-2018:3542-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1013882 SUSE Bug 1013882 https://bugzilla.suse.com/1112368 SUSE Bug 1112368 https://bugzilla.suse.com/1112369 SUSE Bug 1112369 https://bugzilla.suse.com/1112432 SUSE Bug 1112432 https://www.suse.com/security/cve/CVE-2016-9843/ SUSE CVE CVE-2016-9843 page https://www.suse.com/security/cve/CVE-2018-3133/ SUSE CVE CVE-2018-3133 page https://www.suse.com/security/cve/CVE-2018-3174/ SUSE CVE CVE-2018-3174 page https://www.suse.com/security/cve/CVE-2018-3282/ SUSE CVE CVE-2018-3282 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 libmysql55client_r18-32bit-5.5.62-0.39.18.1 libmysql55client_r18-x86-5.5.62-0.39.18.1 libmysql55client18-5.5.62-0.39.18.1 libmysql55client_r18-5.5.62-0.39.18.1 mysql-5.5.62-0.39.18.1 mysql-client-5.5.62-0.39.18.1 mysql-tools-5.5.62-0.39.18.1 libmysql55client18-32bit-5.5.62-0.39.18.1 libmysql55client18-x86-5.5.62-0.39.18.1 libmysql55client18-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 libmysql55client_r18-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 mysql-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 mysql-client-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 mysql-tools-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 libmysql55client18-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libmysql55client18-32bit-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libmysql55client_r18-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS mysql-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS mysql-client-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS mysql-tools-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libmysql55client18-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libmysql55client18-32bit-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libmysql55client_r18-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mysql-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mysql-client-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mysql-tools-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libmysql55client18-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client18-32bit-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client18-x86-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-32bit-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client_r18-x86-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-client-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 mysql-tools-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server 11 SP4 libmysql55client18-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client18-32bit-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client18-x86-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client_r18-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client_r18-32bit-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client_r18-x86-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 mysql-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 mysql-client-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 mysql-tools-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libmysql55client_r18-32bit-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libmysql55client_r18-x86-5.5.62-0.39.18.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation. CVE-2016-9843 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 moderate 4.6 AV:N/AC:H/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183542-1/ https://www.suse.com/security/cve/CVE-2016-9843.html CVE-2016-9843 https://bugzilla.suse.com/1003580 SUSE Bug 1003580 https://bugzilla.suse.com/1013882 SUSE Bug 1013882 https://bugzilla.suse.com/1038505 SUSE Bug 1038505 https://bugzilla.suse.com/1062104 SUSE Bug 1062104 https://bugzilla.suse.com/1116686 SUSE Bug 1116686 https://bugzilla.suse.com/1120866 SUSE Bug 1120866 https://bugzilla.suse.com/1123150 SUSE Bug 1123150 https://bugzilla.suse.com/1127473 SUSE Bug 1127473 https://bugzilla.suse.com/1184301 SUSE Bug 1184301 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-3133 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183542-1/ https://www.suse.com/security/cve/CVE-2018-3133.html CVE-2018-3133 https://bugzilla.suse.com/1112369 SUSE Bug 1112369 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H). CVE-2018-3174 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183542-1/ https://www.suse.com/security/cve/CVE-2018-3174.html CVE-2018-3174 https://bugzilla.suse.com/1112368 SUSE Bug 1112368 https://bugzilla.suse.com/1116686 SUSE Bug 1116686 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-3282 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.62-0.39.18.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.62-0.39.18.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.62-0.39.18.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.62-0.39.18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20183542-1/ https://www.suse.com/security/cve/CVE-2018-3282.html CVE-2018-3282 https://bugzilla.suse.com/1112432 SUSE Bug 1112432 https://bugzilla.suse.com/1116686 SUSE Bug 1116686