Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

openSUSE 42.3: Security Update openSUSE-SU-2018:0223-1 for MySQL

opensuse
Calendar Grey January 26, 2018
Dist Opensuse Esm H88
This critical software revision fixes several flaws in postgres-server, reinforcing overall network protection.
An update that fixes 15 vulnerabilities is now available.

Description

This update for mysql-community-server to version 5.6.39 fixes several

issues.

These security issues were fixed:

- CVE-2018-2622: Vulnerability in the subcomponent: Server: DDL. Easily

exploitable vulnerability allowed low privileged attacker with network

access via multiple protocols to compromise MySQL Server. Successful

attacks of this vulnerability can result in unauthorized ability to

cause a hang or frequently repeatable crash (complete DOS) of MySQL

Server (bsc#1076369).

- CVE-2018-2562: Vulnerability in the subcomponent: Server : Partition.

Easily exploitable vulnerability allowed low privileged attacker with

network access via multiple protocols to compromise MySQL Server.

Successful attacks of this vulnerability can result in unauthorized

ability to cause a hang or frequently repeatable crash (complete DOS) of

MySQL Server as well as unauthorized update, insert or delete access to

some of MySQL Server...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security update vulnerability DoS risk openSUSE mysql-community-server severity important

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.3:

zypper in -t patch openSUSE-2018-90=1

- openSUSE Leap 42.2:

zypper in -t patch openSUSE-2018-90=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE Leap 42.3 (i586 x86_64):

libmysql56client18-5.6.39-33.1

libmysql56client18-debuginfo-5.6.39-33.1

libmysql56client_r18-5.6.39-33.1

mysql-community-server-5.6.39-33.1

mysql-community-server-bench-5.6.39-33.1

mysql-community-server-bench-debuginfo-5.6.39-33.1

mysql-community-server-client-5.6.39-33.1

mysql-community-server-client-debuginfo-5.6.39-33.1

mysql-community-server-debuginfo-5.6.39-33.1

mysql-community-server-debugsource-5.6.39-33.1

mysql-community-server-test-5.6.39-33.1

mysql-community-server-test-debuginfo-5.6.39-33.1

mysql-community-server-tools-5.6.39-33.1

mysql-community-server-tools-debuginfo-5.6.39-33.1

- openSUSE Leap 42.3 (x86_64):

libmysql56client18-32bit-5.6.39-33.1

libmysql56client18-debuginfo-32bit-5.6.39-33.1

libmysql56client_r18-32bit-5.6.39-33.1

- openSUSE Leap 42.3 (noarch):

mysql-community-server-errormessages-5.6.39-33.1

- openSUSE Leap 42.2 (i586 x86_64):

libmysql56client18-5.6.39-24.15.1

libmysql56client18-debuginfo-5.6.39-24.15.1

libmysql56client_r18-5.6.39-24.15.1

mysql...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2017-3737.html

https://www.suse.com/security/cve/CVE-2018-2562.html

https://www.suse.com/security/cve/CVE-2018-2573.html

https://www.suse.com/security/cve/CVE-2018-2583.html

https://www.suse.com/security/cve/CVE-2018-2590.html

https://www.suse.com/security/cve/CVE-2018-2591.html

https://www.suse.com/security/cve/CVE-2018-2612.html

https://www.suse.com/security/cve/CVE-2018-2622.html

https://www.suse.com/security/cve/CVE-2018-2640.html

https://www.suse.com/security/cve/CVE-2018-2645.html

https://www.suse.com/security/cve/CVE-2018-2647.html

https://www.suse.com/security/cve/CVE-2018-2665.html

https://www.suse.com/security/cve/CVE-2018-2668.html

https://www.suse.com/security/cve/CVE-2018-2696.html

https://www.suse.com/security/cve/CVE-2018-2703.html

https://bugzilla.suse.com/show_bug.cgi?id=1076369

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2018:0223-1
Rating: important
Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2

Topics%20covered

Topics Covered

security advisory security update vulnerability DoS risk openSUSE mysql-community-server severity important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here