SUSE-SU-2015:1788-1

Dashboard / Vulnerabilities / SUSE-SU-2015:1788-1

SUSE-SU-2015:1788-1

Summary: Security update for mysql

Details: MySQL was updated to version 5.5.45, fixing bugs and security issues. A list of all changes can be found on: - http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-45.html - http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-44.html To fix the 'BACKRONYM' security issue (CVE-2015-3152) the behaviour of the SSL options was changed slightly to meet expectations: Now using '--ssl-verify-server-cert' and '--ssl[-*]' implies that the ssl connection is required. The mysql client will now print an error if ssl is required, but the server can not handle a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152] Additional bugs fixed: - fix rc.mysql-multi script to start instances after restart properly [bnc#934401].

References: https://www.suse.com/support/update/announcement/2015/suse-su-20151788-1/, https://bugzilla.suse.com/924663, https://bugzilla.suse.com/928962, https://bugzilla.suse.com/934401, https://bugzilla.suse.com/938412, https://www.suse.com/security/cve/CVE-2015-2582, https://www.suse.com/security/cve/CVE-2015-2611, https://www.suse.com/security/cve/CVE-2015-2617, https://www.suse.com/security/cve/CVE-2015-2620, https://www.suse.com/security/cve/CVE-2015-2639, https://www.suse.com/security/cve/CVE-2015-2641, https://www.suse.com/security/cve/CVE-2015-2643, https://www.suse.com/security/cve/CVE-2015-2648, https://www.suse.com/security/cve/CVE-2015-2661, https://www.suse.com/security/cve/CVE-2015-3152, https://www.suse.com/security/cve/CVE-2015-4737, https://www.suse.com/security/cve/CVE-2015-4752, https://www.suse.com/security/cve/CVE-2015-4756, https://www.suse.com/security/cve/CVE-2015-4757, https://www.suse.com/security/cve/CVE-2015-4761, https://www.suse.com/security/cve/CVE-2015-4767, https://www.suse.com/security/cve/CVE-2015-4769, https://www.suse.com/security/cve/CVE-2015-4771, https://www.suse.com/security/cve/CVE-2015-4772