| Description: | Summary:
The remote host is missing an update for the 'MySQL' package(s) announced via the SUSE-SU-2015:0946-1 advisory.
Vulnerability Insight:
MySQL was updated to version 5.5.43 to fix several security and non security issues:
CVEs fixed:
CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572,
CVE-2014-8275, CVE-2015-0204, CVE-2015-0205, CVE-2015-0206,
CVE-2015-0405, CVE-2015-0423, CVE-2015-0433, CVE-2015-0438,
CVE-2015-0439, CVE-2015-0441, CVE-2015-0498, CVE-2015-0499,
CVE-2015-0500, CVE-2015-0501, CVE-2015-0503, CVE-2015-0505,
CVE-2015-0506, CVE-2015-0507, CVE-2015-0508, CVE-2015-0511,
CVE-2015-2566, CVE-2015-2567, CVE-2015-2568, CVE-2015-2571,
CVE-2015-2573, CVE-2015-2576.
Fix integer overflow in regcomp (Henry Spencer's regex library) for excessively long pattern strings. (bnc#922043, CVE-2015-2305)
For a comprehensive list of changes, refer to [link moved to references].
Security Issues:
CVE-2014-3569 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-8275 CVE-2015-0204 CVE-2015-0205 CVE-2015-0206 CVE-2015-0405 CVE-2015-0423 CVE-2015-0433 CVE-2015-0438 CVE-2015-0439 CVE-2015-0441 CVE-2015-0498 CVE-2015-0499 CVE-2015-0500 CVE-2015-0501 CVE-2015-0503 CVE-2015-0505 CVE-2015-0506 CVE-2015-0507 CVE-2015-0508 CVE-2015-0511 CVE-2015-2566 CVE-2015-2567 CVE-2015-2568 CVE-2015-2571 CVE-2015-2573 CVE-2015-2576 CVE-2015-2305
Affected Software/OS:
'MySQL' package(s) on SUSE Linux Enterprise Desktop 11 SP3, SUSE Linux Enterprise Server 11 SP3, SUSE Linux Enterprise Software Development Kit 11 SP3.
Solution:
Please install the updated package(s).
CVSS Score:
6.8
CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
