<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for mysql</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2016:2343-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2016-09-20T14:55:34Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2016-09-20T14:55:34Z</InitialReleaseDate>
    <CurrentReleaseDate>2016-09-20T14:55:34Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for mysql</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
This mysql update to verson 5.5.52 fixes the following issues: 

Security issues fixed:
- CVE-2016-3477: Fixed unspecified vulnerability in subcomponent parser (bsc#989913).
- CVE-2016-3521: Fixed unspecified vulnerability in subcomponent types (bsc#989919).
- CVE-2016-3615: Fixed unspecified vulnerability in subcomponent dml (bsc#989922).
- CVE-2016-5440: Fixed unspecified vulnerability in subcomponent rbr (bsc#989926).
- CVE-2016-6662: A malicious user with SQL and filesystem access could create
  a my.cnf in the datadir and , under certain circumstances, execute
  arbitrary code as mysql (or even root) user. (bsc#998309)


More details can be found on:
      http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html
      http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-51.html
      http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-50.html

Bugs fixed:
- bsc#967374: properly restart mysql multi instances during upgrade
- bnc#937258: multi script to restart after crash
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">sdksp4-mysql-12752,sleclo50sp3-mysql-12752,sleman21-mysql-12752,slemap21-mysql-12752,sleposp3-mysql-12752,slessp3-mysql-12752,slessp4-mysql-12752</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/</URL>
      <Description>Link for SUSE-SU-2016:2343-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2016-September/002279.html</URL>
      <Description>E-Mail link for SUSE-SU-2016:2343-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/937258</URL>
      <Description>SUSE Bug 937258</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/967374</URL>
      <Description>SUSE Bug 967374</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/989913</URL>
      <Description>SUSE Bug 989913</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/989919</URL>
      <Description>SUSE Bug 989919</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/989922</URL>
      <Description>SUSE Bug 989922</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/989926</URL>
      <Description>SUSE Bug 989926</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/998309</URL>
      <Description>SUSE Bug 998309</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-3477/</URL>
      <Description>SUSE CVE CVE-2016-3477 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-3521/</URL>
      <Description>SUSE CVE CVE-2016-3521 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-3615/</URL>
      <Description>SUSE CVE CVE-2016-3615 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-5440/</URL>
      <Description>SUSE CVE CVE-2016-5440 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-6662/</URL>
      <Description>SUSE CVE CVE-2016-6662 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Point of Sale 11 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Point of Sale 11 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Point of Sale 11 SP3" CPE="cpe:/o:suse:sle-pos:11:sp3">SUSE Linux Enterprise Point of Sale 11 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP3-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP3-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-LTSS" CPE="cpe:/o:suse:suse_sles_ltss:11:sp3">SUSE Linux Enterprise Server 11 SP3-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP3-TERADATA">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA" CPE="cpe:/o:suse:sles:11:sp3:teradata">SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4" CPE="cpe:/o:suse:suse_sles:11:sp4">SUSE Linux Enterprise Server 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4" CPE="cpe:/o:suse:sles_sap:11:sp4">SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4" CPE="cpe:/a:suse:sle-sdk:11:sp4">SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager 2.1">
      <Branch Type="Product Name" Name="SUSE Manager 2.1">
        <FullProductName ProductID="SUSE Manager 2.1" CPE="cpe:/o:suse:suse-manager-server:2.1">SUSE Manager 2.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Proxy 2.1">
      <Branch Type="Product Name" Name="SUSE Manager Proxy 2.1">
        <FullProductName ProductID="SUSE Manager Proxy 2.1" CPE="cpe:/o:suse:suse-manager-proxy:2.1">SUSE Manager Proxy 2.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud 5">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud 5">
        <FullProductName ProductID="SUSE OpenStack Cloud 5" CPE="cpe:/o:suse:cloud:5">SUSE OpenStack Cloud 5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client_r18-32bit-5.5.52-0.27.1">
      <FullProductName ProductID="libmysql55client_r18-32bit-5.5.52-0.27.1">libmysql55client_r18-32bit-5.5.52-0.27.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client_r18-x86-5.5.52-0.27.1">
      <FullProductName ProductID="libmysql55client_r18-x86-5.5.52-0.27.1">libmysql55client_r18-x86-5.5.52-0.27.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client18-5.5.52-0.27.1">
      <FullProductName ProductID="libmysql55client18-5.5.52-0.27.1">libmysql55client18-5.5.52-0.27.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client18-32bit-5.5.52-0.27.1">
      <FullProductName ProductID="libmysql55client18-32bit-5.5.52-0.27.1">libmysql55client18-32bit-5.5.52-0.27.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client_r18-5.5.52-0.27.1">
      <FullProductName ProductID="libmysql55client_r18-5.5.52-0.27.1">libmysql55client_r18-5.5.52-0.27.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mysql-5.5.52-0.27.1">
      <FullProductName ProductID="mysql-5.5.52-0.27.1">mysql-5.5.52-0.27.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mysql-client-5.5.52-0.27.1">
      <FullProductName ProductID="mysql-client-5.5.52-0.27.1">mysql-client-5.5.52-0.27.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mysql-tools-5.5.52-0.27.1">
      <FullProductName ProductID="mysql-tools-5.5.52-0.27.1">mysql-tools-5.5.52-0.27.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client18-x86-5.5.52-0.27.1">
      <FullProductName ProductID="libmysql55client18-x86-5.5.52-0.27.1">libmysql55client18-x86-5.5.52-0.27.1</FullProductName>
    </Branch>
    <Relationship ProductReference="libmysql55client18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Point of Sale 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1">libmysql55client18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Point of Sale 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1">libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Point of Sale 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1">mysql-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-client-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Point of Sale 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1">mysql-client-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-tools-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Point of Sale 11 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1">mysql-tools-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1">libmysql55client18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-32bit-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1">libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1">libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1">mysql-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-client-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1">mysql-client-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-tools-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1">mysql-tools-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1">libmysql55client18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-32bit-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1">libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1">libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1">mysql-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-client-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1">mysql-client-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-tools-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP3-TERADATA">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1">mysql-tools-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1">libmysql55client18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-32bit-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1">libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-x86-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1">libmysql55client18-x86-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1">libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-32bit-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1">libmysql55client_r18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-x86-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1">libmysql55client_r18-x86-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1">mysql-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-client-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1">mysql-client-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-tools-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1">mysql-tools-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1">libmysql55client18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-32bit-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1">libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-x86-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1">libmysql55client18-x86-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1">libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-32bit-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1">libmysql55client_r18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-x86-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1">libmysql55client_r18-x86-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1">mysql-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-client-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1">mysql-client-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-tools-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1">mysql-tools-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-32bit-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1">libmysql55client_r18-32bit-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-x86-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1">libmysql55client_r18-x86-5.5.52-0.27.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager 2.1">
      <FullProductName ProductID="SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1">libmysql55client18-5.5.52-0.27.1 as a component of SUSE Manager 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-32bit-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager 2.1">
      <FullProductName ProductID="SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1">libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Manager 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager 2.1">
      <FullProductName ProductID="SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1">libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Manager 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager 2.1">
      <FullProductName ProductID="SUSE Manager 2.1:mysql-5.5.52-0.27.1">mysql-5.5.52-0.27.1 as a component of SUSE Manager 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-client-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager 2.1">
      <FullProductName ProductID="SUSE Manager 2.1:mysql-client-5.5.52-0.27.1">mysql-client-5.5.52-0.27.1 as a component of SUSE Manager 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-tools-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager 2.1">
      <FullProductName ProductID="SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1">mysql-tools-5.5.52-0.27.1 as a component of SUSE Manager 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 2.1">
      <FullProductName ProductID="SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1">libmysql55client18-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-32bit-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 2.1">
      <FullProductName ProductID="SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1">libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 2.1">
      <FullProductName ProductID="SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1">libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 2.1">
      <FullProductName ProductID="SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1">mysql-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-client-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 2.1">
      <FullProductName ProductID="SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1">mysql-client-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-tools-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 2.1">
      <FullProductName ProductID="SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1">mysql-tools-5.5.52-0.27.1 as a component of SUSE Manager Proxy 2.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 5">
      <FullProductName ProductID="SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1">libmysql55client18-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-32bit-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 5">
      <FullProductName ProductID="SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1">libmysql55client18-32bit-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 5">
      <FullProductName ProductID="SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1">libmysql55client_r18-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 5">
      <FullProductName ProductID="SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1">mysql-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-client-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 5">
      <FullProductName ProductID="SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1">mysql-client-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-tools-5.5.52-0.27.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 5">
      <FullProductName ProductID="SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1">mysql-tools-5.5.52-0.27.1 as a component of SUSE OpenStack Cloud 5</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.</Note>
    </Notes>
    <CVE>CVE-2016-3477</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>7.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>8.1</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-3477.html</URL>
        <Description>CVE-2016-3477</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/989913</URL>
        <Description>SUSE Bug 989913</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/991616</URL>
        <Description>SUSE Bug 991616</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.</Note>
    </Notes>
    <CVE>CVE-2016-3521</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-3521.html</URL>
        <Description>CVE-2016-3521</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/989919</URL>
        <Description>SUSE Bug 989919</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/991616</URL>
        <Description>SUSE Bug 991616</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML.</Note>
    </Notes>
    <CVE>CVE-2016-3615</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-3615.html</URL>
        <Description>CVE-2016-3615</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/989922</URL>
        <Description>SUSE Bug 989922</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/991616</URL>
        <Description>SUSE Bug 991616</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.</Note>
    </Notes>
    <CVE>CVE-2016-5440</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.9</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-5440.html</URL>
        <Description>CVE-2016-5440</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/989926</URL>
        <Description>SUSE Bug 989926</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/991616</URL>
        <Description>SUSE Bug 991616</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.</Note>
    </Notes>
    <CVE>CVE-2016-6662</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Point of Sale 11 SP3:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-LTSS:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP3-TERADATA:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager 2.1:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE Manager Proxy 2.1:mysql-tools-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client18-32bit-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:libmysql55client_r18-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-client-5.5.52-0.27.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 5:mysql-tools-5.5.52-0.27.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>8.5</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:S/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>9.8</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20162343-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-6662.html</URL>
        <Description>CVE-2016-6662</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1001367</URL>
        <Description>SUSE Bug 1001367</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005580</URL>
        <Description>SUSE Bug 1005580</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020873</URL>
        <Description>SUSE Bug 1020873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020884</URL>
        <Description>SUSE Bug 1020884</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1021755</URL>
        <Description>SUSE Bug 1021755</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/998309</URL>
        <Description>SUSE Bug 998309</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
