SUSE-SU-2017:2290-1: moderate: Security update for mysql

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for mysql
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2290-1
Rating:             moderate
References:         #1049398 #1049399 #1049404 #1049411 #1049415 
                    #1049416 #1049417 #1049422 
Cross-References:   CVE-2017-3635 CVE-2017-3636 CVE-2017-3641
                    CVE-2017-3648 CVE-2017-3651 CVE-2017-3652
                    CVE-2017-3653
Affected Products:
                    SUSE Linux Enterprise Software Development Kit 11-SP4
                    SUSE Linux Enterprise Server 11-SP4
                    SUSE Linux Enterprise Debuginfo 11-SP4
______________________________________________________________________________

   An update that solves 7 vulnerabilities and has one errata
   is now available.

Description:

   This update for mysql fixes the following issues:


   - CVE-2017-3635: C API unspecified vulnerability (bsc#1049398)
   - CVE-2017-3636: Client programs unspecified vulnerability (bsc#1049399)
   - CVE-2017-3641: DML unspecified vulnerability (bsc#1049404)
   - CVE-2017-3648: Charsets unspecified vulnerability (bsc#1049411)
   - CVE-2017-3651: Client mysqldump unspecified vulnerability (bsc#1049415)
   - CVE-2017-3652: DDL unspecified vulnerability (bsc#1049416)
   - CVE-2017-3653: DDL unspecified vulnerability (bsc#1049417)


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Software Development Kit 11-SP4:

      zypper in -t patch sdksp4-mysql-13252=1

   - SUSE Linux Enterprise Server 11-SP4:

      zypper in -t patch slessp4-mysql-13252=1

   - SUSE Linux Enterprise Debuginfo 11-SP4:

      zypper in -t patch dbgsp4-mysql-13252=1

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Software Development Kit 11-SP4 (ppc64 s390x x86_64):

      libmysql55client_r18-32bit-5.5.57-0.39.3.1

   - SUSE Linux Enterprise Software Development Kit 11-SP4 (ia64):

      libmysql55client_r18-x86-5.5.57-0.39.3.1

   - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64):

      libmysql55client18-5.5.57-0.39.3.1
      libmysql55client_r18-5.5.57-0.39.3.1
      mysql-5.5.57-0.39.3.1
      mysql-client-5.5.57-0.39.3.1
      mysql-tools-5.5.57-0.39.3.1

   - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64):

      libmysql55client18-32bit-5.5.57-0.39.3.1
      libmysql55client_r18-32bit-5.5.57-0.39.3.1

   - SUSE Linux Enterprise Server 11-SP4 (ia64):

      libmysql55client18-x86-5.5.57-0.39.3.1
      libmysql55client_r18-x86-5.5.57-0.39.3.1

   - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64):

      mysql-debuginfo-5.5.57-0.39.3.1
      mysql-debugsource-5.5.57-0.39.3.1


References:

   https://www.suse.com/security/cve/CVE-2017-3635.html
   https://www.suse.com/security/cve/CVE-2017-3636.html
   https://www.suse.com/security/cve/CVE-2017-3641.html
   https://www.suse.com/security/cve/CVE-2017-3648.html
   https://www.suse.com/security/cve/CVE-2017-3651.html
   https://www.suse.com/security/cve/CVE-2017-3652.html
   https://www.suse.com/security/cve/CVE-2017-3653.html
   https://bugzilla.suse.com/1049398
   https://bugzilla.suse.com/1049399
   https://bugzilla.suse.com/1049404
   https://bugzilla.suse.com/1049411
   https://bugzilla.suse.com/1049415
   https://bugzilla.suse.com/1049416
   https://bugzilla.suse.com/1049417
   https://bugzilla.suse.com/1049422