Security update for mysql
SUSE Security Update: Security update for mysql
| Announcement ID: | SUSE-SU-2016:1618-1 |
| Rating: | moderate |
| References: | #934789 #959724 |
| Affected Products: |
An update that solves one vulnerability and has one errata is now available.
Description:
This update for mysql fixes the following issues:
- bsc#959724: fix incorrect usage of sprintf/strcpy that caused possible
buffer overflow issues at various places
On SUSE Linux Enterprise 11 SP4 this fix was not yet shipped:
- Increase the key length (to 2048 bits) used in vio/viosslfactories.c for
creating Diffie-Hellman keys (Logjam Attack) [bnc#934789] [CVE-2015-4000]
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Software Development Kit 11-SP4:
zypper in -t patch sdksp4-mysql-12620=1 - SUSE Linux Enterprise Server 11-SP4:
zypper in -t patch slessp4-mysql-12620=1
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64):
- libmysqlclient-devel-5.0.96-0.8.10.3
- SUSE Linux Enterprise Software Development Kit 11-SP4 (ppc64 s390x x86_64):
- libmysqlclient_r15-32bit-5.0.96-0.8.10.3
- SUSE Linux Enterprise Software Development Kit 11-SP4 (ia64):
- libmysqlclient_r15-x86-5.0.96-0.8.10.3
- SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64):
- libmysqlclient15-5.0.96-0.8.10.3
- libmysqlclient_r15-5.0.96-0.8.10.3
- SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64):
- libmysqlclient15-32bit-5.0.96-0.8.10.3
- SUSE Linux Enterprise Server 11-SP4 (ia64):
- libmysqlclient15-x86-5.0.96-0.8.10.3