Security update for mariadb
This update fixes the following security issues: * Logjam attack: mysql uses 512 bit dh groups in SSL [bnc#934789] * CVE-2015-3152: mysql --ssl does not enforce SSL [bnc#924663] * CVE-2014-8964: heap buffer overflow [bnc#906574] * CVE-2015-2325: heap buffer overflow in compile_branch() [bnc#924960] * CVE-2015-2326: heap buffer overflow in pcre_compile2() [bnc#924961] * CVE-2015-0501: unspecified vulnerability related to Server:Compiling (CPU April 2015) * CVE-2015-2571: unspecified vulnerability related to Server:Optimizer (CPU April 2015) * CVE-2015-0505: unspecified vulnerability related to Server:DDL (CPU April 2015) * CVE-2015-0499: unspecified vulnerability related to Server:Federated (CPU April 2015) * CVE-2015-2568: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015) * CVE-2015-2573: unspecified vulnerability related to Server:DDL (CPU April 2015) * CVE-2015-0433: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015) * CVE-2015-0441: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update fixes the following security issues: * Logjam attack: mysql uses 512 bit dh groups in SSL [bnc#934789] * CVE-2015-3152: mysql --ssl does not enforce SSL [bnc#924663] * CVE-2014-8964: heap buffer overflow [bnc#906574] * CVE-2015-2325: heap buffer overflow in compile_branch() [bnc#924960] * CVE-2015-2326: heap buffer overflow in pcre_compile2() [bnc#924961] * CVE-2015-0501: unspecified vulnerability related to Server:Compiling (CPU April 2015) * CVE-2015-2571: unspecified vulnerability related to Server:Optimizer (CPU April 2015) * CVE-2015-0505: unspecified vulnerability related to Server:DDL (CPU April 2015) * CVE-2015-0499: unspecified vulnerability related to Server:Federated (CPU April 2015) * CVE-2015-2568: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015) * CVE-2015-2573: unspecified vulnerability related to Server:DDL (CPU April 2015) * CVE-2015-0433: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015) * CVE-2015-0441: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/906574
- https://bugzilla.suse.com/919053
- https://bugzilla.suse.com/919062
- https://bugzilla.suse.com/920865
- https://bugzilla.suse.com/920896
- https://bugzilla.suse.com/921333
- https://bugzilla.suse.com/924663
- https://bugzilla.suse.com/924960
- https://bugzilla.suse.com/924961
- https://bugzilla.suse.com/934789
- https://bugzilla.suse.com/936407
- https://bugzilla.suse.com/936408
- https://bugzilla.suse.com/936409
- https://www.suse.com/security/cve/CVE-2014-8964
- https://www.suse.com/security/cve/CVE-2015-0433
- https://www.suse.com/security/cve/CVE-2015-0441
- https://www.suse.com/security/cve/CVE-2015-0499
- https://www.suse.com/security/cve/CVE-2015-0501
- https://www.suse.com/security/cve/CVE-2015-0505
- https://www.suse.com/security/cve/CVE-2015-2325
- https://www.suse.com/security/cve/CVE-2015-2326
- https://www.suse.com/security/cve/CVE-2015-2568
- https://www.suse.com/security/cve/CVE-2015-2571
- https://www.suse.com/security/cve/CVE-2015-2573
- https://www.suse.com/security/cve/CVE-2015-3152
- https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/