openSUSE Security Update: Security update for mysql-community-server
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2017:2868-1
Rating:             important
References:         #1039034 #1064096 #1064100 #1064101 #1064102 
                    #1064104 #1064105 #1064107 #1064108 #1064112 
                    #1064115 #1064116 #1064117 #1064118 #1064119 
                    
Cross-References:   CVE-2017-10155 CVE-2017-10227 CVE-2017-10268
                    CVE-2017-10276 CVE-2017-10279 CVE-2017-10283
                    CVE-2017-10286 CVE-2017-10294 CVE-2017-10314
                    CVE-2017-10378 CVE-2017-10379 CVE-2017-10384
                    CVE-2017-3731
Affected Products:
                    openSUSE Leap 42.3
                    openSUSE Leap 42.2
______________________________________________________________________________

   An update that solves 13 vulnerabilities and has two fixes
   is now available.

Description:



   This update for mysql-community-server to 5.6.38 fixes the following
   issues:

   Full list of changes:

       http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html

   CVEs fixed:

   -   [boo#1064116] CVE-2017-10379
   -   [boo#1064117] CVE-2017-10384
   -   [boo#1064115] CVE-2017-10378
   -   [boo#1064101] CVE-2017-10268
   -   [boo#1064096] CVE-2017-10155
   -   [boo#1064118] CVE-2017-3731
   -   [boo#1064102] CVE-2017-10276
   -   [boo#1064105] CVE-2017-10283
   -   [boo#1064112] CVE-2017-10314
   -   [boo#1064100] CVE-2017-10227
   -   [boo#1064104] CVE-2017-10279
   -   [boo#1064108] CVE-2017-10294
   -   [boo#1064107] CVE-2017-10286

   Additional changes:

   - add "BuildRequires: unixODBC-devel" to allow ODBC support for
 Connect
     engine [boo#1039034]
   - update filename in /var/adm/update-messages to match documentation, and
     build-compare pattern
   - some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
     wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
   - fixed incorrect descriptions and mismatching RPM groups


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE Leap 42.3:

      zypper in -t patch openSUSE-2017-1196=1

   - openSUSE Leap 42.2:

      zypper in -t patch openSUSE-2017-1196=1

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE Leap 42.3 (i586 x86_64):

      libmysql56client18-5.6.38-30.1
      libmysql56client18-debuginfo-5.6.38-30.1
      libmysql56client_r18-5.6.38-30.1
      mysql-community-server-5.6.38-30.1
      mysql-community-server-bench-5.6.38-30.1
      mysql-community-server-bench-debuginfo-5.6.38-30.1
      mysql-community-server-client-5.6.38-30.1
      mysql-community-server-client-debuginfo-5.6.38-30.1
      mysql-community-server-debuginfo-5.6.38-30.1
      mysql-community-server-debugsource-5.6.38-30.1
      mysql-community-server-test-5.6.38-30.1
      mysql-community-server-test-debuginfo-5.6.38-30.1
      mysql-community-server-tools-5.6.38-30.1
      mysql-community-server-tools-debuginfo-5.6.38-30.1

   - openSUSE Leap 42.3 (noarch):

      mysql-community-server-errormessages-5.6.38-30.1

   - openSUSE Leap 42.3 (x86_64):

      libmysql56client18-32bit-5.6.38-30.1
      libmysql56client18-debuginfo-32bit-5.6.38-30.1
      libmysql56client_r18-32bit-5.6.38-30.1

   - openSUSE Leap 42.2 (i586 x86_64):

      libmysql56client18-5.6.38-24.12.1
      libmysql56client18-debuginfo-5.6.38-24.12.1
      libmysql56client_r18-5.6.38-24.12.1
      mysql-community-server-5.6.38-24.12.1
      mysql-community-server-bench-5.6.38-24.12.1
      mysql-community-server-bench-debuginfo-5.6.38-24.12.1
      mysql-community-server-client-5.6.38-24.12.1
      mysql-community-server-client-debuginfo-5.6.38-24.12.1
      mysql-community-server-debuginfo-5.6.38-24.12.1
      mysql-community-server-debugsource-5.6.38-24.12.1
      mysql-community-server-test-5.6.38-24.12.1
      mysql-community-server-test-debuginfo-5.6.38-24.12.1
      mysql-community-server-tools-5.6.38-24.12.1
      mysql-community-server-tools-debuginfo-5.6.38-24.12.1

   - openSUSE Leap 42.2 (x86_64):

      libmysql56client18-32bit-5.6.38-24.12.1
      libmysql56client18-debuginfo-32bit-5.6.38-24.12.1
      libmysql56client_r18-32bit-5.6.38-24.12.1

   - openSUSE Leap 42.2 (noarch):

      mysql-community-server-errormessages-5.6.38-24.12.1


References:

   https://www.suse.com/security/cve/CVE-2017-10155.html
   https://www.suse.com/security/cve/CVE-2017-10227.html
   https://www.suse.com/security/cve/CVE-2017-10268.html
   https://www.suse.com/security/cve/CVE-2017-10276.html
   https://www.suse.com/security/cve/CVE-2017-10279.html
   https://www.suse.com/security/cve/CVE-2017-10283.html
   https://www.suse.com/security/cve/CVE-2017-10286.html
   https://www.suse.com/security/cve/CVE-2017-10294.html
   https://www.suse.com/security/cve/CVE-2017-10314.html
   https://www.suse.com/security/cve/CVE-2017-10378.html
   https://www.suse.com/security/cve/CVE-2017-10379.html
   https://www.suse.com/security/cve/CVE-2017-10384.html
   https://www.suse.com/security/cve/CVE-2017-3731.html
   https://bugzilla.suse.com/1039034
   https://bugzilla.suse.com/1064096
   https://bugzilla.suse.com/1064100
   https://bugzilla.suse.com/1064101
   https://bugzilla.suse.com/1064102
   https://bugzilla.suse.com/1064104
   https://bugzilla.suse.com/1064105
   https://bugzilla.suse.com/1064107
   https://bugzilla.suse.com/1064108
   https://bugzilla.suse.com/1064112
   https://bugzilla.suse.com/1064115
   https://bugzilla.suse.com/1064116
   https://bugzilla.suse.com/1064117
   https://bugzilla.suse.com/1064118
   https://bugzilla.suse.com/1064119

-- 
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org