SUSE-SU-2015:1177-2: important: Security update for MySQL

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for MySQL
______________________________________________________________________________

Announcement ID:    SUSE-SU-2015:1177-2
Rating:             important
References:         #934789 
Cross-References:   CVE-2015-4000
Affected Products:
                    SUSE Linux Enterprise Server 11 SP2 LTSS
                    SUSE Linux Enterprise Server 11 SP1 LTSS
______________________________________________________________________________

   An update that fixes one vulnerability is now available. It
   includes one version update.

Description:


   This MySQL update fixes the following security issue:

       * Logjam Attack: MySQL uses 512 bit DH groups in SSL connections.
         (bsc#934789)

   Security Issues:

       * CVE-2015-4000
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000>


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11 SP2 LTSS:

      zypper in -t patch slessp2-libmysqlclient-devel=10835

   - SUSE Linux Enterprise Server 11 SP1 LTSS:

      zypper in -t patch slessp1-libmysqlclient-devel=10834

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Server 11 SP2 LTSS (i586 s390x x86_64) [New Version: 5.0.96]:

      libmysqlclient15-5.0.96-0.8.8.2
      libmysqlclient_r15-5.0.96-0.8.8.2
      mysql-5.0.96-0.8.8.2
      mysql-Max-5.0.96-0.8.8.2
      mysql-client-5.0.96-0.8.8.2
      mysql-tools-5.0.96-0.8.8.2

   - SUSE Linux Enterprise Server 11 SP2 LTSS (s390x x86_64) [New Version: 5.0.96]:

      libmysqlclient15-32bit-5.0.96-0.8.8.2

   - SUSE Linux Enterprise Server 11 SP1 LTSS (i586 s390x x86_64) [New Version: 5.0.96]:

      libmysqlclient15-5.0.96-0.8.8.2
      libmysqlclient_r15-5.0.96-0.8.8.2
      mysql-5.0.96-0.8.8.2
      mysql-Max-5.0.96-0.8.8.2
      mysql-client-5.0.96-0.8.8.2
      mysql-tools-5.0.96-0.8.8.2

   - SUSE Linux Enterprise Server 11 SP1 LTSS (s390x x86_64) [New Version: 5.0.96]:

      libmysqlclient15-32bit-5.0.96-0.8.8.2


References:

   https://www.suse.com/security/cve/CVE-2015-4000.html
   https://bugzilla.suse.com/934789
   https://download.suse.com/patch/finder/?keywords=981d8f54c6495496c156cd451d10c084
   https://download.suse.com/patch/finder/?keywords=9bf49a65c370d89b69d6200ce055b991