Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:0367-1

Опубликовано: 07 фев. 2016
Источник: suse-cvrf

Описание

Security update for MySQL

This update to MySQL 5.6.28 fixes the following issues (bsc#962779):

  • CVE-2015-7744: Lack of verification against faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.
  • CVE-2016-0502: Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
  • CVE-2016-0503: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504.
  • CVE-2016-0504: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0503.
  • CVE-2016-0505: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Options.
  • CVE-2016-0546: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client.
  • CVE-2016-0594: Unspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to affect availability via vectors related to DML.
  • CVE-2016-0595: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML.
  • CVE-2016-0596: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML.
  • CVE-2016-0597: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
  • CVE-2016-0598: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML.
  • CVE-2016-0600: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
  • CVE-2016-0605: Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors.
  • CVE-2016-0606: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect integrity via unknown vectors related to encryption.
  • CVE-2016-0607: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication.
  • CVE-2016-0608: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via vectors related to UDF.
  • CVE-2016-0609: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to privileges.
  • CVE-2016-0610: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
  • CVE-2016-0611: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
  • CVE-2015-5969: Fixed information leak via mysql-systemd-helper script. (bsc#957174)
  • bsc#959724: Possible buffer overflow from incorrect use of strcpy() and sprintf()

Список пакетов

openSUSE Leap 42.1
libmysql56client18-5.6.28-13.1
libmysql56client18-32bit-5.6.28-13.1
libmysql56client_r18-5.6.28-13.1
libmysql56client_r18-32bit-5.6.28-13.1
mysql-community-server-5.6.28-13.1
mysql-community-server-bench-5.6.28-13.1
mysql-community-server-client-5.6.28-13.1
mysql-community-server-errormessages-5.6.28-13.1
mysql-community-server-test-5.6.28-13.1
mysql-community-server-tools-5.6.28-13.1

Ссылки

Описание

The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12.1 and openSUSE Leap 42.1 allows local users to discover database credentials by listing a process and its arguments.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0503.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to affect availability via vectors related to DML.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки

Описание

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

Затронутые продукты
openSUSE Leap 42.1:libmysql56client18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client18-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-32bit-5.6.28-13.1
openSUSE Leap 42.1:libmysql56client_r18-5.6.28-13.1
Ссылки