Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

openSUSE 13.1: 2016:0377-1 Important MySQL Availability Issue

opensuse
Calendar Grey February 8, 2016
Dist Opensuse Esm H88
The security patch for PostgreSQL on Fedora significantly mitigates 23 flaws, bolstering overall system safety and reliability.
An update that fixes 19 vulnerabilities is now available

Description

This update to MySQL 5.6.28 fixes the following issues (bsc#962779):

- CVE-2015-7744: Lack of verification against faults associated with the

Chinese Remainder Theorem (CRT) process when allowing ephemeral key

exchange without low memory optimizations on a server, which makes it

easier for remote attackers to obtain private RSA keys by capturing TLS

handshakes, aka a Lenstra attack.

- CVE-2016-0502: Unspecified vulnerability in Oracle MySQL 5.5.31 and

earlier and 5.6.11 and earlier allows remote authenticated users to

affect availability via unknown vectors related to Optimizer.

- CVE-2016-0503: Unspecified vulnerability in Oracle MySQL 5.6.27 and

earlier and 5.7.9 allows remote authenticated users to affect

availability via vectors related to DML, a different vulnerability than

CVE-2016-0504.

- CVE-2016-0504: Unspecified vulnerability in Oracle MySQL 5.6.27 and

earlier and 5.7.9 allows remote authenticated users to...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue MySQL important openSUSE availability

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.1:

zypper in -t patch 2016-169=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.1 (i586 x86_64):

libmysql56client18-5.6.28-7.16.1

libmysql56client18-debuginfo-5.6.28-7.16.1

libmysql56client_r18-5.6.28-7.16.1

mysql-community-server-5.6.28-7.16.1

mysql-community-server-bench-5.6.28-7.16.1

mysql-community-server-bench-debuginfo-5.6.28-7.16.1

mysql-community-server-client-5.6.28-7.16.1

mysql-community-server-client-debuginfo-5.6.28-7.16.1

mysql-community-server-debuginfo-5.6.28-7.16.1

mysql-community-server-debugsource-5.6.28-7.16.1

mysql-community-server-errormessages-5.6.28-7.16.1

mysql-community-server-test-5.6.28-7.16.1

mysql-community-server-test-debuginfo-5.6.28-7.16.1

mysql-community-server-tools-5.6.28-7.16.1

mysql-community-server-tools-debuginfo-5.6.28-7.16.1

- openSUSE 13.1 (x86_64):

libmysql56client18-32bit-5.6.28-7.16.1

libmysql56client18-debuginfo-32bit-5.6.28-7.16.1

libmysql56client_r18-32bit-5.6.28-7.16.1

References

https://www.suse.com/security/cve/CVE-2015-7744.html

https://www.suse.com/security/cve/CVE-2016-0502.html

https://www.suse.com/security/cve/CVE-2016-0503.html

https://www.suse.com/security/cve/CVE-2016-0504.html

https://www.suse.com/security/cve/CVE-2016-0505.html

https://www.suse.com/security/cve/CVE-2016-0546.html

https://www.suse.com/security/cve/CVE-2016-0594.html

https://www.suse.com/security/cve/CVE-2016-0595.html

https://www.suse.com/security/cve/CVE-2016-0596.html

https://www.suse.com/security/cve/CVE-2016-0597.html

https://www.suse.com/security/cve/CVE-2016-0598.html

https://www.suse.com/security/cve/CVE-2016-0600.html

https://www.suse.com/security/cve/CVE-2016-0605.html

https://www.suse.com/security/cve/CVE-2016-0606.html

https://www.suse.com/security/cve/CVE-2016-0607.html

https://www.suse.com/security/cve/CVE-2016-0608.html

https://www.suse.com/security/cve/CVE-2016-0609.html

https://www.suse.com/security/cve/CVE-2016-0610.html

https://www.suse.com/security/cve/CVE-2016-0611.html

https://bugz...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2016:0377-1
Rating: important
Affected Products: openSUSE 13.1 .

Topics%20covered

Topics Covered

security advisory security issue MySQL important openSUSE availability

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here