Security update for mariadb

Announcement ID:	SUSE-SU-2016:0296-1
Rating:	moderate
References:	bsc#937787 bsc#957174 bsc#958789
Cross-References:	CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4870 CVE-2015-4913 CVE-2015-5969
CVSS scores:
Affected Products:	SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1

An update that solves 12 vulnerabilities can now be installed.

Description:

MariaDB has been updated to version 10.0.22, which brings fixes for many security issues and other improvements.

The following CVEs have been fixed:

• 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4913, CVE-2015-4792
• Fix information leak via mysql-systemd-helper script. (CVE-2015-5969, bsc#957174)

For a comprehensive list of changes refer to the upstream Release Notes and Change Log documents:

• https://kb.askmonty.org/en/mariadb-10022-release-notes/
• https://kb.askmonty.org/en/mariadb-10022-changelog/

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Desktop 12 SP1
  zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2016-183=1
• SUSE Linux Enterprise Software Development Kit 12 SP1
  zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-183=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP1
  zypper in -t patch SUSE-SLE-SERVER-12-SP1-2016-183=1
• SUSE Linux Enterprise Server 12 SP1
  zypper in -t patch SUSE-SLE-SERVER-12-SP1-2016-183=1
• SUSE Linux Enterprise Workstation Extension 12 SP1
  zypper in -t patch SUSE-SLE-WE-12-SP1-2016-183=1

Package List:

• SUSE Linux Enterprise Desktop 12 SP1 (x86_64)
  • mariadb-10.0.22-3.1
  • libmysqlclient18-10.0.22-3.1
  • mariadb-client-debuginfo-10.0.22-3.1
  • mariadb-client-10.0.22-3.1
  • libmysqlclient18-32bit-10.0.22-3.1
  • mariadb-debuginfo-10.0.22-3.1
  • mariadb-errormessages-10.0.22-3.1
  • libmysqlclient_r18-10.0.22-3.1
  • libmysqlclient_r18-32bit-10.0.22-3.1
  • libmysqlclient18-debuginfo-32bit-10.0.22-3.1
  • mariadb-debugsource-10.0.22-3.1
  • libmysqlclient18-debuginfo-10.0.22-3.1
• SUSE Linux Enterprise Software Development Kit 12 SP1 (ppc64le s390x x86_64)
  • libmysqld18-10.0.22-3.1
  • libmysqlclient-devel-10.0.22-3.1
  • libmysqld-devel-10.0.22-3.1
  • mariadb-debuginfo-10.0.22-3.1
  • libmysqld18-debuginfo-10.0.22-3.1
  • libmysqlclient_r18-10.0.22-3.1
  • mariadb-debugsource-10.0.22-3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP1 (ppc64le x86_64)
  • mariadb-10.0.22-3.1
  • libmysqlclient18-10.0.22-3.1
  • mariadb-client-debuginfo-10.0.22-3.1
  • mariadb-tools-10.0.22-3.1
  • mariadb-client-10.0.22-3.1
  • mariadb-debuginfo-10.0.22-3.1
  • mariadb-errormessages-10.0.22-3.1
  • mariadb-tools-debuginfo-10.0.22-3.1
  • mariadb-debugsource-10.0.22-3.1
  • libmysqlclient18-debuginfo-10.0.22-3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP1 (x86_64)
  • libmysqlclient18-32bit-10.0.22-3.1
  • libmysqlclient18-debuginfo-32bit-10.0.22-3.1
• SUSE Linux Enterprise Server 12 SP1 (ppc64le s390x x86_64)
  • mariadb-10.0.22-3.1
  • libmysqlclient18-10.0.22-3.1
  • mariadb-client-debuginfo-10.0.22-3.1
  • mariadb-tools-10.0.22-3.1
  • mariadb-client-10.0.22-3.1
  • mariadb-debuginfo-10.0.22-3.1
  • mariadb-errormessages-10.0.22-3.1
  • mariadb-tools-debuginfo-10.0.22-3.1
  • mariadb-debugsource-10.0.22-3.1
  • libmysqlclient18-debuginfo-10.0.22-3.1
• SUSE Linux Enterprise Server 12 SP1 (s390x x86_64)
  • libmysqlclient18-32bit-10.0.22-3.1
  • libmysqlclient18-debuginfo-32bit-10.0.22-3.1
• SUSE Linux Enterprise Workstation Extension 12 SP1 (x86_64)
  • libmysqlclient_r18-32bit-10.0.22-3.1
  • libmysqlclient_r18-10.0.22-3.1
  • mariadb-debugsource-10.0.22-3.1
  • mariadb-debuginfo-10.0.22-3.1

References:

• https://www.suse.com/security/cve/CVE-2015-4792.html
• https://www.suse.com/security/cve/CVE-2015-4802.html
• https://www.suse.com/security/cve/CVE-2015-4807.html
• https://www.suse.com/security/cve/CVE-2015-4815.html
• https://www.suse.com/security/cve/CVE-2015-4826.html
• https://www.suse.com/security/cve/CVE-2015-4830.html
• https://www.suse.com/security/cve/CVE-2015-4836.html
• https://www.suse.com/security/cve/CVE-2015-4858.html
• https://www.suse.com/security/cve/CVE-2015-4861.html
• https://www.suse.com/security/cve/CVE-2015-4870.html
• https://www.suse.com/security/cve/CVE-2015-4913.html
• https://www.suse.com/security/cve/CVE-2015-5969.html
• https://bugzilla.suse.com/show_bug.cgi?id=937787
• https://bugzilla.suse.com/show_bug.cgi?id=957174
• https://bugzilla.suse.com/show_bug.cgi?id=958789