openSUSE Security Update: Security update for MariaDB ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1216-1 Rating: important References: #859345 #914370 #924663 #934789 #936407 #936408 #936409 Cross-References: CVE-2014-6464 CVE-2014-6469 CVE-2014-6491 CVE-2014-6494 CVE-2014-6496 CVE-2014-6500 CVE-2014-6507 CVE-2014-6555 CVE-2014-6559 CVE-2014-6568 CVE-2014-8964 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382 CVE-2015-0411 CVE-2015-0432 CVE-2015-0433 CVE-2015-0441 CVE-2015-0499 CVE-2015-0501 CVE-2015-0505 CVE-2015-2325 CVE-2015-2326 CVE-2015-2568 CVE-2015-2571 CVE-2015-2573 CVE-2015-3152 CVE-2015-4000 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: MariaDB was updated to its current minor version, fixing bugs and security issues. These updates include a fix for Logjam (CVE-2015-4000), making MariaDB work with client software that no longer allows short DH groups over SSL, as e.g. our current openssl packages. On openSUSE 13.1, MariaDB was updated to 5.5.44. On openSUSE 13.2, MariaDB was updated from 10.0.13 to 10.0.20. Please read the release notes of MariaDB https://mariadb.com/kb/en/mariadb/mariadb-10020-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10019-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10018-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10017-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10016-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10015-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10014-release-notes/ for more information. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-479=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-479=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysqlclient-devel-10.0.20-2.9.1 libmysqlclient18-10.0.20-2.9.1 libmysqlclient18-debuginfo-10.0.20-2.9.1 libmysqlclient_r18-10.0.20-2.9.1 libmysqld-devel-10.0.20-2.9.1 libmysqld18-10.0.20-2.9.1 libmysqld18-debuginfo-10.0.20-2.9.1 mariadb-10.0.20-2.9.1 mariadb-bench-10.0.20-2.9.1 mariadb-bench-debuginfo-10.0.20-2.9.1 mariadb-client-10.0.20-2.9.1 mariadb-client-debuginfo-10.0.20-2.9.1 mariadb-debuginfo-10.0.20-2.9.1 mariadb-debugsource-10.0.20-2.9.1 mariadb-errormessages-10.0.20-2.9.1 mariadb-test-10.0.20-2.9.1 mariadb-test-debuginfo-10.0.20-2.9.1 mariadb-tools-10.0.20-2.9.1 mariadb-tools-debuginfo-10.0.20-2.9.1 - openSUSE 13.2 (x86_64): libmysqlclient18-32bit-10.0.20-2.9.1 libmysqlclient18-debuginfo-32bit-10.0.20-2.9.1 libmysqlclient_r18-32bit-10.0.20-2.9.1 - openSUSE 13.1 (i586 x86_64): libmysqlclient-devel-5.5.44-4.1 libmysqlclient18-5.5.44-4.1 libmysqlclient18-debuginfo-5.5.44-4.1 libmysqlclient_r18-5.5.44-4.1 libmysqld-devel-5.5.44-4.1 libmysqld18-5.5.44-4.1 libmysqld18-debuginfo-5.5.44-4.1 mariadb-5.5.44-4.1 mariadb-bench-5.5.44-4.1 mariadb-bench-debuginfo-5.5.44-4.1 mariadb-client-5.5.44-4.1 mariadb-client-debuginfo-5.5.44-4.1 mariadb-debuginfo-5.5.44-4.1 mariadb-debugsource-5.5.44-4.1 mariadb-errormessages-5.5.44-4.1 mariadb-test-5.5.44-4.1 mariadb-test-debuginfo-5.5.44-4.1 mariadb-tools-5.5.44-4.1 mariadb-tools-debuginfo-5.5.44-4.1 - openSUSE 13.1 (x86_64): libmysqlclient18-32bit-5.5.44-4.1 libmysqlclient18-debuginfo-32bit-5.5.44-4.1 libmysqlclient_r18-32bit-5.5.44-4.1 References: https://www.suse.com/security/cve/CVE-2014-6464.html https://www.suse.com/security/cve/CVE-2014-6469.html https://www.suse.com/security/cve/CVE-2014-6491.html https://www.suse.com/security/cve/CVE-2014-6494.html https://www.suse.com/security/cve/CVE-2014-6496.html https://www.suse.com/security/cve/CVE-2014-6500.html https://www.suse.com/security/cve/CVE-2014-6507.html https://www.suse.com/security/cve/CVE-2014-6555.html https://www.suse.com/security/cve/CVE-2014-6559.html https://www.suse.com/security/cve/CVE-2014-6568.html https://www.suse.com/security/cve/CVE-2014-8964.html https://www.suse.com/security/cve/CVE-2015-0374.html https://www.suse.com/security/cve/CVE-2015-0381.html https://www.suse.com/security/cve/CVE-2015-0382.html https://www.suse.com/security/cve/CVE-2015-0411.html https://www.suse.com/security/cve/CVE-2015-0432.html https://www.suse.com/security/cve/CVE-2015-0433.html https://www.suse.com/security/cve/CVE-2015-0441.html https://www.suse.com/security/cve/CVE-2015-0499.html https://www.suse.com/security/cve/CVE-2015-0501.html https://www.suse.com/security/cve/CVE-2015-0505.html https://www.suse.com/security/cve/CVE-2015-2325.html https://www.suse.com/security/cve/CVE-2015-2326.html https://www.suse.com/security/cve/CVE-2015-2568.html https://www.suse.com/security/cve/CVE-2015-2571.html https://www.suse.com/security/cve/CVE-2015-2573.html https://www.suse.com/security/cve/CVE-2015-3152.html https://www.suse.com/security/cve/CVE-2015-4000.html https://bugzilla.suse.com/859345 https://bugzilla.suse.com/914370 https://bugzilla.suse.com/924663 https://bugzilla.suse.com/934789 https://bugzilla.suse.com/936407 https://bugzilla.suse.com/936408 https://bugzilla.suse.com/936409