{"affected":[{"ecosystem_specific":{"binaries":[{"libmysqlclient18":"10.0.20-18.1","libmysqlclient18-32bit":"10.0.20-18.1","libmysqlclient_r18":"10.0.20-18.1","libmysqlclient_r18-32bit":"10.0.20-18.1","mariadb":"10.0.20-18.1","mariadb-client":"10.0.20-18.1","mariadb-errormessages":"10.0.20-18.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12","name":"mariadb","purl":"pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Desktop%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"10.0.20-18.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libmysqlclient-devel":"10.0.20-18.1","libmysqlclient_r18":"10.0.20-18.1","libmysqld-devel":"10.0.20-18.1","libmysqld18":"10.0.20-18.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","name":"mariadb","purl":"pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"10.0.20-18.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libmysqlclient18":"10.0.20-18.1","libmysqlclient18-32bit":"10.0.20-18.1","mariadb":"10.0.20-18.1","mariadb-client":"10.0.20-18.1","mariadb-errormessages":"10.0.20-18.1","mariadb-tools":"10.0.20-18.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12","name":"mariadb","purl":"pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"10.0.20-18.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libmysqlclient18":"10.0.20-18.1","libmysqlclient18-32bit":"10.0.20-18.1","mariadb":"10.0.20-18.1","mariadb-client":"10.0.20-18.1","mariadb-errormessages":"10.0.20-18.1","mariadb-tools":"10.0.20-18.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","name":"mariadb","purl":"pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"10.0.20-18.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libmysqlclient_r18":"10.0.20-18.1","libmysqlclient_r18-32bit":"10.0.20-18.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","name":"mariadb","purl":"pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"10.0.20-18.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\n      This update fixes the following security issues:\n    * Logjam attack: mysql uses 512 bit dh groups in SSL [bnc#934789]\n    * CVE-2015-3152: mysql --ssl does not enforce SSL [bnc#924663]\n    * CVE-2014-8964: heap buffer overflow [bnc#906574]\n    * CVE-2015-2325: heap buffer overflow in compile_branch() [bnc#924960]\n    * CVE-2015-2326: heap buffer overflow in pcre_compile2() [bnc#924961]\n    * CVE-2015-0501: unspecified vulnerability related to Server:Compiling (CPU April 2015) \n    * CVE-2015-2571: unspecified vulnerability related to Server:Optimizer (CPU April 2015)\n    * CVE-2015-0505: unspecified vulnerability related to Server:DDL (CPU April 2015) \n    * CVE-2015-0499: unspecified vulnerability related to Server:Federated (CPU April 2015) \n    * CVE-2015-2568: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015) \n    * CVE-2015-2573: unspecified vulnerability related to Server:DDL (CPU April 2015)\n    * CVE-2015-0433: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015) \n    * CVE-2015-0441: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015) \n  ","id":"SUSE-SU-2015:1273-1","modified":"2015-07-21T11:08:14Z","published":"2015-07-21T11:08:14Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151273-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/906574"},{"type":"REPORT","url":"https://bugzilla.suse.com/919053"},{"type":"REPORT","url":"https://bugzilla.suse.com/919062"},{"type":"REPORT","url":"https://bugzilla.suse.com/920865"},{"type":"REPORT","url":"https://bugzilla.suse.com/920896"},{"type":"REPORT","url":"https://bugzilla.suse.com/921333"},{"type":"REPORT","url":"https://bugzilla.suse.com/924663"},{"type":"REPORT","url":"https://bugzilla.suse.com/924960"},{"type":"REPORT","url":"https://bugzilla.suse.com/924961"},{"type":"REPORT","url":"https://bugzilla.suse.com/934789"},{"type":"REPORT","url":"https://bugzilla.suse.com/936407"},{"type":"REPORT","url":"https://bugzilla.suse.com/936408"},{"type":"REPORT","url":"https://bugzilla.suse.com/936409"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2014-8964"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-0433"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-0441"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-0499"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-0501"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-0505"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2325"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2326"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2568"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2571"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2573"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-3152"}],"related":["CVE-2014-8964","CVE-2015-0433","CVE-2015-0441","CVE-2015-0499","CVE-2015-0501","CVE-2015-0505","CVE-2015-2325","CVE-2015-2326","CVE-2015-2568","CVE-2015-2571","CVE-2015-2573","CVE-2015-3152"],"summary":"Security update for mariadb","upstream":["CVE-2014-8964","CVE-2015-0433","CVE-2015-0441","CVE-2015-0499","CVE-2015-0501","CVE-2015-0505","CVE-2015-2325","CVE-2015-2326","CVE-2015-2568","CVE-2015-2571","CVE-2015-2573","CVE-2015-3152"]}