This update for mysql to version 5.5.61 fixes the following issues:
The following security vulnerabilities were addressed :

  - CVE-2018-3066: Fixed a difficult to exploit     vulnerability that allowed high privileged attacker with     network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability     can result in unauthorized update, insert or delete     access to some of MySQL Server accessible data as well     as unauthorized read access to a subset of MySQL Server     accessible data. (bsc#1101678)

  - CVE-2018-3070: Fixed an easily exploitable vulnerability     that allowed low privileged attacker with network access     via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server.
    (bsc#1101679)

  - CVE-2018-3081: Fixed a difficult to exploit     vulnerability that allowed high privileged attacker with     network access via multiple protocols to compromise     MySQL Client. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of MySQL     Client as well as unauthorized update, insert or delete     access to some of MySQL Client accessible data.
    (bsc#1101680)

  - CVE-2018-3058: Fixed an easily exploitable vulnerability     that allowed low privileged attacker with network access     via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of     MySQL Server accessible data. (bsc#1101676)

  - CVE-2018-3063: Fixed an easily exploitable vulnerability     allowed high privileged attacker with network access via     multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server.
    (bsc#1101677) You can find more detailed information     about this update in the [release     notes](http://dev.mysql.com/doc/relnotes/mysql/5.5/en/ne     ws-5-5-61.html)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLES11 Security Update : mysql (SUSE-SU-2018:2411-1)

medium Nessus Plugin ID 112014

Version 1.7