openSUSE Security Update: Security update for MariaDB
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2015:1216-1
Rating:             important
References:         #859345 #914370 #924663 #934789 #936407 #936408 
                    #936409 
Cross-References:   CVE-2014-6464 CVE-2014-6469 CVE-2014-6491
                    CVE-2014-6494 CVE-2014-6496 CVE-2014-6500
                    CVE-2014-6507 CVE-2014-6555 CVE-2014-6559
                    CVE-2014-6568 CVE-2014-8964 CVE-2015-0374
                    CVE-2015-0381 CVE-2015-0382 CVE-2015-0411
                    CVE-2015-0432 CVE-2015-0433 CVE-2015-0441
                    CVE-2015-0499 CVE-2015-0501 CVE-2015-0505
                    CVE-2015-2325 CVE-2015-2326 CVE-2015-2568
                    CVE-2015-2571 CVE-2015-2573 CVE-2015-3152
                    CVE-2015-4000
Affected Products:
                    openSUSE 13.2
                    openSUSE 13.1
______________________________________________________________________________

   An update that fixes 28 vulnerabilities is now available.

Description:


   MariaDB was updated to its current minor version, fixing bugs and security
   issues.

   These updates include a fix for Logjam (CVE-2015-4000), making MariaDB
   work with client software that no longer allows short DH groups over SSL,
   as e.g.
   our current openssl packages.

   On openSUSE 13.1, MariaDB was updated to 5.5.44.

   On openSUSE 13.2, MariaDB was updated from 10.0.13 to 10.0.20.

   Please read the release notes of MariaDB
   https://mariadb.com/kb/en/mariadb/mariadb-10020-release-notes/
   https://mariadb.com/kb/en/mariadb/mariadb-10019-release-notes/
   https://mariadb.com/kb/en/mariadb/mariadb-10018-release-notes/
   https://mariadb.com/kb/en/mariadb/mariadb-10017-release-notes/
   https://mariadb.com/kb/en/mariadb/mariadb-10016-release-notes/
   https://mariadb.com/kb/en/mariadb/mariadb-10015-release-notes/
   https://mariadb.com/kb/en/mariadb/mariadb-10014-release-notes/ for more
   information.


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 13.2:

      zypper in -t patch openSUSE-2015-479=1

   - openSUSE 13.1:

      zypper in -t patch openSUSE-2015-479=1

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 13.2 (i586 x86_64):

      libmysqlclient-devel-10.0.20-2.9.1
      libmysqlclient18-10.0.20-2.9.1
      libmysqlclient18-debuginfo-10.0.20-2.9.1
      libmysqlclient_r18-10.0.20-2.9.1
      libmysqld-devel-10.0.20-2.9.1
      libmysqld18-10.0.20-2.9.1
      libmysqld18-debuginfo-10.0.20-2.9.1
      mariadb-10.0.20-2.9.1
      mariadb-bench-10.0.20-2.9.1
      mariadb-bench-debuginfo-10.0.20-2.9.1
      mariadb-client-10.0.20-2.9.1
      mariadb-client-debuginfo-10.0.20-2.9.1
      mariadb-debuginfo-10.0.20-2.9.1
      mariadb-debugsource-10.0.20-2.9.1
      mariadb-errormessages-10.0.20-2.9.1
      mariadb-test-10.0.20-2.9.1
      mariadb-test-debuginfo-10.0.20-2.9.1
      mariadb-tools-10.0.20-2.9.1
      mariadb-tools-debuginfo-10.0.20-2.9.1

   - openSUSE 13.2 (x86_64):

      libmysqlclient18-32bit-10.0.20-2.9.1
      libmysqlclient18-debuginfo-32bit-10.0.20-2.9.1
      libmysqlclient_r18-32bit-10.0.20-2.9.1

   - openSUSE 13.1 (i586 x86_64):

      libmysqlclient-devel-5.5.44-4.1
      libmysqlclient18-5.5.44-4.1
      libmysqlclient18-debuginfo-5.5.44-4.1
      libmysqlclient_r18-5.5.44-4.1
      libmysqld-devel-5.5.44-4.1
      libmysqld18-5.5.44-4.1
      libmysqld18-debuginfo-5.5.44-4.1
      mariadb-5.5.44-4.1
      mariadb-bench-5.5.44-4.1
      mariadb-bench-debuginfo-5.5.44-4.1
      mariadb-client-5.5.44-4.1
      mariadb-client-debuginfo-5.5.44-4.1
      mariadb-debuginfo-5.5.44-4.1
      mariadb-debugsource-5.5.44-4.1
      mariadb-errormessages-5.5.44-4.1
      mariadb-test-5.5.44-4.1
      mariadb-test-debuginfo-5.5.44-4.1
      mariadb-tools-5.5.44-4.1
      mariadb-tools-debuginfo-5.5.44-4.1

   - openSUSE 13.1 (x86_64):

      libmysqlclient18-32bit-5.5.44-4.1
      libmysqlclient18-debuginfo-32bit-5.5.44-4.1
      libmysqlclient_r18-32bit-5.5.44-4.1


References:

   https://www.suse.com/security/cve/CVE-2014-6464.html
   https://www.suse.com/security/cve/CVE-2014-6469.html
   https://www.suse.com/security/cve/CVE-2014-6491.html
   https://www.suse.com/security/cve/CVE-2014-6494.html
   https://www.suse.com/security/cve/CVE-2014-6496.html
   https://www.suse.com/security/cve/CVE-2014-6500.html
   https://www.suse.com/security/cve/CVE-2014-6507.html
   https://www.suse.com/security/cve/CVE-2014-6555.html
   https://www.suse.com/security/cve/CVE-2014-6559.html
   https://www.suse.com/security/cve/CVE-2014-6568.html
   https://www.suse.com/security/cve/CVE-2014-8964.html
   https://www.suse.com/security/cve/CVE-2015-0374.html
   https://www.suse.com/security/cve/CVE-2015-0381.html
   https://www.suse.com/security/cve/CVE-2015-0382.html
   https://www.suse.com/security/cve/CVE-2015-0411.html
   https://www.suse.com/security/cve/CVE-2015-0432.html
   https://www.suse.com/security/cve/CVE-2015-0433.html
   https://www.suse.com/security/cve/CVE-2015-0441.html
   https://www.suse.com/security/cve/CVE-2015-0499.html
   https://www.suse.com/security/cve/CVE-2015-0501.html
   https://www.suse.com/security/cve/CVE-2015-0505.html
   https://www.suse.com/security/cve/CVE-2015-2325.html
   https://www.suse.com/security/cve/CVE-2015-2326.html
   https://www.suse.com/security/cve/CVE-2015-2568.html
   https://www.suse.com/security/cve/CVE-2015-2571.html
   https://www.suse.com/security/cve/CVE-2015-2573.html
   https://www.suse.com/security/cve/CVE-2015-3152.html
   https://www.suse.com/security/cve/CVE-2015-4000.html
   https://bugzilla.suse.com/859345
   https://bugzilla.suse.com/914370
   https://bugzilla.suse.com/924663
   https://bugzilla.suse.com/934789
   https://bugzilla.suse.com/936407
   https://bugzilla.suse.com/936408
   https://bugzilla.suse.com/936409

-- 
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org