Уведомление безопасности SUSE-SU-2014:0769-1: обновление MySQL

Критичная (10.0)

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

SUSE

libmysql55client_r18 (any) libmysql55client_r18-32bit (any) libmysql55client_r18-x86 (any) libmysql55client18 (any) libmysql55client18-32bit (any) libmysql55client18-x86 (any) libmysqlclient_r15 (any) libmysqlclient_r15-32bit (any) libmysqlclient_r15-x86 (any) libmysqlclient15 (any) libmysqlclient15-32bit (any) libmysqlclient15-x86 (any) mysql (any) mysql-client (any) mysql-tools (any)

Версия MySQL обновлена до 5.5.37; в ней устранены следующие уязвимости:

   Более подробная информация доступна по адресу:
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html#Ahttp://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html#A">http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html#A />    ppendixMSQL
   <http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html#http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html#">http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html# />    AppendixMSQL> и
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#Ahttp://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#A">http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#A />    ppendixMSQL
   <http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#">http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html# />    AppendixMSQL>

   Ссылки на описания уязвимостей:

       * CVE-2014-2444
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2444&>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2444&">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2444&> />        * CVE-2014-2436
        <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2436>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2436">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2436> />        * CVE-2014-2440
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2440>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2440">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2440> />        * CVE-2014-2434
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2434>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2434">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2434> />        * CVE-2014-2435
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2435>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2435">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2435> />        * CVE-2014-2442
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2442>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2442">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2442> />        * CVE-2014-2450
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2450>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2450">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2450> />        * CVE-2014-2419
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2419>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2419">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2419> />        * CVE-2014-0384
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0384>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0384">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0384> />        * CVE-2014-2430
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2430>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2430">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2430> />        * CVE-2014-2451
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2451>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2451">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2451> />        * CVE-2014-2438
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2438>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2438">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2438> />        * CVE-2014-2432
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2432>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2432">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2432> />        * CVE-2014-2431
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2431>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2431">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2431> />        * CVE-2013-4316
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4316>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4316">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4316> />        * CVE-2013-5860
        <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5860>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5860">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5860> />        * CVE-2013-5882
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5882>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5882">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5882> />        * CVE-2014-0433
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0433>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0433">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0433> />        * CVE-2013-5894
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5894>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5894">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5894> />        * CVE-2013-5881
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5881>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5881">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5881> />        * CVE-2014-0412
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0412>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0412">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0412> />        * CVE-2014-0402
        <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0402>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0402">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0402> />        * CVE-2014-0386
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0386>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0386">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0386> />        * CVE-2013-5891
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5891>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5891">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5891> />        * CVE-2014-0401
        <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0401>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0401">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0401> />        * CVE-2014-0427
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0427>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0427">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0427> />        * CVE-2014-0431
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0431>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0431">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0431> />        * CVE-2014-0437
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0437>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0437">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0437> />        * CVE-2014-0393
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0393>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0393">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0393> />        * CVE-2014-0430
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0430>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0430">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0430> />        * CVE-2014-0420
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0420>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0420">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0420> />        * CVE-2013-5908
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5908>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5908">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5908> />        * CVE-2014-0001
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0001>">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0001">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0001>

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 11 SP3:
ppc64, s390x, x86_64:
libmysqlclient_r15-32bit - 5.0.96-0.6.11
libmysql55client_r18-32bit - 5.5.37-0.7.1
SUSE Linux Enterprise Server 11 SP3:
ppc64, s390x, x86_64:
libmysql55client18-32bit - 5.5.37-0.7.1
libmysqlclient15-32bit - 5.0.96-0.6.11
SUSE Linux Enterprise Desktop 11 SP3:
i586, x86_64:
libmysqlclient_r15 - 5.0.96-0.6.11
mysql-client - 5.5.37-0.7.1
libmysql55client_r18 - 5.5.37-0.7.1
mysql - 5.5.37-0.7.1
libmysql55client18 - 5.5.37-0.7.1
libmysqlclient15 - 5.0.96-0.6.11
SUSE Linux Enterprise Server 11 SP3 for VMware:
i586, x86_64:
libmysqlclient_r15 - 5.0.96-0.6.11
mysql-client - 5.5.37-0.7.1
mysql-tools - 5.5.37-0.7.1
libmysql55client_r18 - 5.5.37-0.7.1
mysql - 5.5.37-0.7.1
libmysql55client18 - 5.5.37-0.7.1
libmysqlclient15 - 5.0.96-0.6.11

http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00012.html
https://bugzilla.novell.com/858823
https://bugzilla.novell.com/861493
https://bugzilla.novell.com/873896
http://download.suse.com/patch/finder/?keywords=ab4ffe747d344a455ea19aa1b92c9b75

Источник: CVE
Наименование: CVE-2014-0427
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0427

Источник: CVE
Наименование: CVE-2014-0420
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0420

Источник: CVE
Наименование: CVE-2014-0393
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0393

Источник: CVE
Наименование: CVE-2014-2451
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2451

Источник: CVE
Наименование: CVE-2014-2450
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2450

Источник: CVE
Наименование: CVE-2014-2432
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2432

Источник: CVE
Наименование: CVE-2014-2431
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2431

Источник: CVE
Наименование: CVE-2014-2430
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2430

Источник: CVE
Наименование: CVE-2014-2436
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2436

Источник: CVE
Наименование: CVE-2014-2435
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2435

Источник: CVE
Наименование: CVE-2014-2434
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2434

Источник: CVE
Наименование: CVE-2014-0431
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0431

Источник: CVE
Наименование: CVE-2014-2438
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2438

Источник: CVE
Наименование: CVE-2014-2419
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2419

Источник: CVE
Наименование: CVE-2013-5882
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5882

Источник: CVE
Наименование: CVE-2013-5881
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5881

Источник: CVE
Наименование: CVE-2014-0001
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0001

Источник: CVE
Наименование: CVE-2014-0412
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0412

Источник: CVE
Наименование: CVE-2014-0437
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0437

Источник: CVE
Наименование: CVE-2013-5908
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5908

Источник: CVE
Наименование: CVE-2013-5860
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5860

Источник: CVE
Наименование: CVE-2014-0430
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0430

Источник: CVE
Наименование: CVE-2014-0433
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0433

Источник: CVE
Наименование: CVE-2014-2442
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2442

Источник: CVE
Наименование: CVE-2014-2440
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2440

Источник: CVE
Наименование: CVE-2014-0386
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0386

Источник: CVE
Наименование: CVE-2014-2444
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2444

Источник: CVE
Наименование: CVE-2014-0384
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0384

Источник: CVE
Наименование: CVE-2013-4316
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4316

Источник: CVE
Наименование: CVE-2013-5891
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5891

Источник: CVE
Наименование: CVE-2013-5894
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5894

Источник: CVE
Наименование: CVE-2014-0401
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0401

Источник: CVE
Наименование: CVE-2014-0402
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0402