<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update to MariaDB 10.0.22</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2015:2244-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2015-12-10T07:27:22Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2015-12-10T07:27:22Z</InitialReleaseDate>
    <CurrentReleaseDate>2015-12-10T07:27:22Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update to MariaDB 10.0.22</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">MariaDB was updated to 10.0.22 to fix security issues and bugs.

The following vulnerabilities were fixed in the upstream release:

    CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4826,
    CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861,
    CVE-2015-4870, CVE-2015-4913, CVE-2015-4792

A list of upstream changes and release notes can be found here:

* https://kb.askmonty.org/en/mariadb-10022-release-notes/
* https://kb.askmonty.org/en/mariadb-10022-changelog/

The following build problems were fixed:

* bsc#937787: fix main.bootstrap test (change default charset to utf8 in test result)</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      <Description>E-Mail link for openSUSE-SU-2015:2244-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="openSUSE 13.2">
      <Branch Type="Product Name" Name="openSUSE 13.2">
        <FullProductName ProductID="openSUSE 13.2">openSUSE 13.2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient-devel-10.0.22-2.18.1">
      <FullProductName ProductID="libmysqlclient-devel-10.0.22-2.18.1">libmysqlclient-devel-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient18-10.0.22-2.18.1">
      <FullProductName ProductID="libmysqlclient18-10.0.22-2.18.1">libmysqlclient18-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient18-32bit-10.0.22-2.18.1">
      <FullProductName ProductID="libmysqlclient18-32bit-10.0.22-2.18.1">libmysqlclient18-32bit-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient18-debuginfo-10.0.22-2.18.1">
      <FullProductName ProductID="libmysqlclient18-debuginfo-10.0.22-2.18.1">libmysqlclient18-debuginfo-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1">
      <FullProductName ProductID="libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1">libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient_r18-10.0.22-2.18.1">
      <FullProductName ProductID="libmysqlclient_r18-10.0.22-2.18.1">libmysqlclient_r18-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient_r18-32bit-10.0.22-2.18.1">
      <FullProductName ProductID="libmysqlclient_r18-32bit-10.0.22-2.18.1">libmysqlclient_r18-32bit-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqld-devel-10.0.22-2.18.1">
      <FullProductName ProductID="libmysqld-devel-10.0.22-2.18.1">libmysqld-devel-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqld18-10.0.22-2.18.1">
      <FullProductName ProductID="libmysqld18-10.0.22-2.18.1">libmysqld18-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqld18-debuginfo-10.0.22-2.18.1">
      <FullProductName ProductID="libmysqld18-debuginfo-10.0.22-2.18.1">libmysqld18-debuginfo-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-10.0.22-2.18.1">mariadb-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-bench-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-bench-10.0.22-2.18.1">mariadb-bench-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-bench-debuginfo-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-bench-debuginfo-10.0.22-2.18.1">mariadb-bench-debuginfo-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-client-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-client-10.0.22-2.18.1">mariadb-client-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-client-debuginfo-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-client-debuginfo-10.0.22-2.18.1">mariadb-client-debuginfo-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-debuginfo-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-debuginfo-10.0.22-2.18.1">mariadb-debuginfo-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-debugsource-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-debugsource-10.0.22-2.18.1">mariadb-debugsource-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-errormessages-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-errormessages-10.0.22-2.18.1">mariadb-errormessages-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-test-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-test-10.0.22-2.18.1">mariadb-test-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-test-debuginfo-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-test-debuginfo-10.0.22-2.18.1">mariadb-test-debuginfo-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-tools-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-tools-10.0.22-2.18.1">mariadb-tools-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-tools-debuginfo-10.0.22-2.18.1">
      <FullProductName ProductID="mariadb-tools-debuginfo-10.0.22-2.18.1">mariadb-tools-debuginfo-10.0.22-2.18.1</FullProductName>
    </Branch>
    <Relationship ProductReference="libmysqlclient-devel-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1">libmysqlclient-devel-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1">libmysqlclient18-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1">libmysqlclient18-32bit-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-debuginfo-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1">libmysqlclient18-debuginfo-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1">libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1">libmysqlclient_r18-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-32bit-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1">libmysqlclient_r18-32bit-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld-devel-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1">libmysqld-devel-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld18-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libmysqld18-10.0.22-2.18.1">libmysqld18-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld18-debuginfo-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1">libmysqld18-debuginfo-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-10.0.22-2.18.1">mariadb-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-bench-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-bench-10.0.22-2.18.1">mariadb-bench-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-bench-debuginfo-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1">mariadb-bench-debuginfo-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-client-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-client-10.0.22-2.18.1">mariadb-client-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-client-debuginfo-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1">mariadb-client-debuginfo-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-debuginfo-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1">mariadb-debuginfo-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-debugsource-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1">mariadb-debugsource-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-errormessages-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1">mariadb-errormessages-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-test-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-test-10.0.22-2.18.1">mariadb-test-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-test-debuginfo-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1">mariadb-test-debuginfo-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-tools-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-tools-10.0.22-2.18.1">mariadb-tools-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-tools-debuginfo-10.0.22-2.18.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2">
      <FullProductName ProductID="openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1">mariadb-tools-debuginfo-10.0.22-2.18.1 as a component of openSUSE 13.2</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.</Note>
    </Notes>
    <CVE>CVE-2015-4792</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4792.html</URL>
        <Description>CVE-2015-4792</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792.</Note>
    </Notes>
    <CVE>CVE-2015-4802</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4802.html</URL>
        <Description>CVE-2015-4802</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticated users to affect availability via unknown vectors related to Server : Query Cache.</Note>
    </Notes>
    <CVE>CVE-2015-4807</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4807.html</URL>
        <Description>CVE-2015-4807</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.</Note>
    </Notes>
    <CVE>CVE-2015-4815</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4815.html</URL>
        <Description>CVE-2015-4815</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.</Note>
    </Notes>
    <CVE>CVE-2015-4826</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4826.html</URL>
        <Description>CVE-2015-4826</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.</Note>
    </Notes>
    <CVE>CVE-2015-4830</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4830.html</URL>
        <Description>CVE-2015-4830</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.</Note>
    </Notes>
    <CVE>CVE-2015-4836</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4836.html</URL>
        <Description>CVE-2015-4836</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-4913.</Note>
    </Notes>
    <CVE>CVE-2015-4858</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4858.html</URL>
        <Description>CVE-2015-4858</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.</Note>
    </Notes>
    <CVE>CVE-2015-4861</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4861.html</URL>
        <Description>CVE-2015-4861</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.</Note>
    </Notes>
    <CVE>CVE-2015-4870</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4870.html</URL>
        <Description>CVE-2015-4870</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858.</Note>
    </Notes>
    <CVE>CVE-2015-4913</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2:libmysqlclient-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqlclient_r18-32bit-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld-devel-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:libmysqld18-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-bench-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-client-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-debugsource-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-errormessages-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-test-debuginfo-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-10.0.22-2.18.1</ProductID>
        <ProductID>openSUSE 13.2:mariadb-tools-debuginfo-10.0.22-2.18.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00010.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-4913.html</URL>
        <Description>CVE-2015-4913</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951391</URL>
        <Description>SUSE Bug 951391</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958789</URL>
        <Description>SUSE Bug 958789</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
