<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for mariadb</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2017:0412-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2017-02-07T12:33:36Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2017-02-07T12:33:36Z</InitialReleaseDate>
    <CurrentReleaseDate>2017-02-07T12:33:36Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for mariadb</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
This mariadb version update to 10.0.29 fixes the following issues:

- CVE-2017-3318: unspecified vulnerability affecting Error Handling (bsc#1020896)
- CVE-2017-3317: unspecified vulnerability affecting Logging (bsc#1020894)
- CVE-2017-3312: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873)
- CVE-2017-3291: unrestricted mysqld_safe's ledir (bsc#1020884)
- CVE-2017-3265: unsafe chmod/chown use in init script (bsc#1020885)
- CVE-2017-3258: unspecified vulnerability in the DDL component (bsc#1020875)
- CVE-2017-3257: unspecified vulnerability affecting InnoDB (bsc#1020878)
- CVE-2017-3244: unspecified vulnerability affecing the DML component (bsc#1020877)
- CVE-2017-3243: unspecified vulnerability affecting the Charsets component (bsc#1020891)
- CVE-2017-3238: unspecified vulnerability affecting the Optimizer component (bsc#1020882)
- CVE-2016-6664: Root Privilege Escalation (bsc#1008253)
- Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428)

- notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35

Release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-SLE-DESKTOP-12-SP1-2017-207,SUSE-SLE-DESKTOP-12-SP2-2017-207,SUSE-SLE-RPI-12-SP2-2017-207,SUSE-SLE-SDK-12-SP1-2017-207,SUSE-SLE-SDK-12-SP2-2017-207,SUSE-SLE-SERVER-12-SP1-2017-207,SUSE-SLE-SERVER-12-SP2-2017-207,SUSE-SLE-WE-12-SP1-2017-207,SUSE-SLE-WE-12-SP2-2017-207</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      <Description>Link for SUSE-SU-2017:0412-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2017-February/002629.html</URL>
      <Description>E-Mail link for SUSE-SU-2017:0412-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1008253</URL>
      <Description>SUSE Bug 1008253</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020868</URL>
      <Description>SUSE Bug 1020868</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020873</URL>
      <Description>SUSE Bug 1020873</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020875</URL>
      <Description>SUSE Bug 1020875</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020877</URL>
      <Description>SUSE Bug 1020877</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020878</URL>
      <Description>SUSE Bug 1020878</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020882</URL>
      <Description>SUSE Bug 1020882</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020884</URL>
      <Description>SUSE Bug 1020884</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020885</URL>
      <Description>SUSE Bug 1020885</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020891</URL>
      <Description>SUSE Bug 1020891</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020894</URL>
      <Description>SUSE Bug 1020894</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020896</URL>
      <Description>SUSE Bug 1020896</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1022428</URL>
      <Description>SUSE Bug 1022428</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-6664/</URL>
      <Description>SUSE CVE CVE-2016-6664 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3238/</URL>
      <Description>SUSE CVE CVE-2017-3238 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3243/</URL>
      <Description>SUSE CVE CVE-2017-3243 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3244/</URL>
      <Description>SUSE CVE CVE-2017-3244 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3257/</URL>
      <Description>SUSE CVE CVE-2017-3257 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3258/</URL>
      <Description>SUSE CVE CVE-2017-3258 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3265/</URL>
      <Description>SUSE CVE CVE-2017-3265 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3291/</URL>
      <Description>SUSE CVE CVE-2017-3291 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3312/</URL>
      <Description>SUSE CVE CVE-2017-3312 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3317/</URL>
      <Description>SUSE CVE CVE-2017-3317 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3318/</URL>
      <Description>SUSE CVE CVE-2017-3318 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 12 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 12 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1" CPE="cpe:/o:suse:sled:12:sp1">SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 12 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 12 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP2" CPE="cpe:/o:suse:sled:12:sp2">SUSE Linux Enterprise Desktop 12 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP1" CPE="cpe:/o:suse:sles:12:sp1">SUSE Linux Enterprise Server 12 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2" CPE="cpe:/o:suse:sles:12:sp2">SUSE Linux Enterprise Server 12 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2" CPE="cpe:/o:suse:sles:12:sp2">SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP1" CPE="cpe:/o:suse:sles_sap:12:sp1">SUSE Linux Enterprise Server for SAP Applications 12 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2" CPE="cpe:/o:suse:sles_sap:12:sp2">SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 12 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 12 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP1" CPE="cpe:/o:suse:sle-sdk:12:sp1">SUSE Linux Enterprise Software Development Kit 12 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 12 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 12 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP2" CPE="cpe:/o:suse:sle-sdk:12:sp2">SUSE Linux Enterprise Software Development Kit 12 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Workstation Extension 12 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP1" CPE="cpe:/o:suse:sle-we:12:sp1">SUSE Linux Enterprise Workstation Extension 12 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Workstation Extension 12 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP2" CPE="cpe:/o:suse:sle-we:12:sp2">SUSE Linux Enterprise Workstation Extension 12 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient18-10.0.29-22.1">
      <FullProductName ProductID="libmysqlclient18-10.0.29-22.1">libmysqlclient18-10.0.29-22.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient18-32bit-10.0.29-22.1">
      <FullProductName ProductID="libmysqlclient18-32bit-10.0.29-22.1">libmysqlclient18-32bit-10.0.29-22.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient_r18-10.0.29-22.1">
      <FullProductName ProductID="libmysqlclient_r18-10.0.29-22.1">libmysqlclient_r18-10.0.29-22.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient_r18-32bit-10.0.29-22.1">
      <FullProductName ProductID="libmysqlclient_r18-32bit-10.0.29-22.1">libmysqlclient_r18-32bit-10.0.29-22.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-10.0.29-22.1">
      <FullProductName ProductID="mariadb-10.0.29-22.1">mariadb-10.0.29-22.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-client-10.0.29-22.1">
      <FullProductName ProductID="mariadb-client-10.0.29-22.1">mariadb-client-10.0.29-22.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-errormessages-10.0.29-22.1">
      <FullProductName ProductID="mariadb-errormessages-10.0.29-22.1">mariadb-errormessages-10.0.29-22.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-tools-10.0.29-22.1">
      <FullProductName ProductID="mariadb-tools-10.0.29-22.1">mariadb-tools-10.0.29-22.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient-devel-10.0.29-22.1">
      <FullProductName ProductID="libmysqlclient-devel-10.0.29-22.1">libmysqlclient-devel-10.0.29-22.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqld-devel-10.0.29-22.1">
      <FullProductName ProductID="libmysqld-devel-10.0.29-22.1">libmysqld-devel-10.0.29-22.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqld18-10.0.29-22.1">
      <FullProductName ProductID="libmysqld18-10.0.29-22.1">libmysqld18-10.0.29-22.1</FullProductName>
    </Branch>
    <Relationship ProductReference="libmysqlclient18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1">libmysqlclient18-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1">libmysqlclient18-32bit-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1">libmysqlclient_r18-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-32bit-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1">libmysqlclient_r18-32bit-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1">mariadb-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-client-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1">mariadb-client-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-errormessages-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1">mariadb-errormessages-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1">libmysqlclient18-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1">libmysqlclient18-32bit-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1">libmysqlclient_r18-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-32bit-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1">libmysqlclient_r18-32bit-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1">mariadb-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-client-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1">mariadb-client-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-errormessages-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1">mariadb-errormessages-10.0.29-22.1 as a component of SUSE Linux Enterprise Desktop 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1">libmysqlclient18-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1">libmysqlclient18-32bit-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1">mariadb-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-client-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1">mariadb-client-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-errormessages-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1">mariadb-errormessages-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-tools-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1">mariadb-tools-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1">libmysqlclient18-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1">libmysqlclient18-32bit-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1">mariadb-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-client-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1">mariadb-client-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-errormessages-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1">mariadb-errormessages-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-tools-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1">mariadb-tools-10.0.29-22.1 as a component of SUSE Linux Enterprise Server 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1">libmysqlclient18-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1">mariadb-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-client-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1">mariadb-client-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-errormessages-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1">mariadb-errormessages-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-tools-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1">mariadb-tools-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1">libmysqlclient18-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1">libmysqlclient18-32bit-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1">mariadb-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-client-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1">mariadb-client-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-errormessages-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1">mariadb-errormessages-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-tools-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1">mariadb-tools-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1">libmysqlclient18-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1">libmysqlclient18-32bit-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1">mariadb-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-client-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1">mariadb-client-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-errormessages-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1">mariadb-errormessages-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-tools-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1">mariadb-tools-10.0.29-22.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient-devel-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1">libmysqlclient-devel-10.0.29-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1">libmysqlclient_r18-10.0.29-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld-devel-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1">libmysqld-devel-10.0.29-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1">libmysqld18-10.0.29-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient-devel-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1">libmysqlclient-devel-10.0.29-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1">libmysqlclient_r18-10.0.29-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld-devel-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1">libmysqld-devel-10.0.29-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1">libmysqld18-10.0.29-22.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1">libmysqlclient_r18-10.0.29-22.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-32bit-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1">libmysqlclient_r18-32bit-10.0.29-22.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1">libmysqlclient_r18-10.0.29-22.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-32bit-10.0.29-22.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1">libmysqlclient_r18-32bit-10.0.29-22.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.</Note>
    </Notes>
    <CVE>CVE-2016-6664</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:S/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-6664.html</URL>
        <Description>CVE-2016-6664</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1008253</URL>
        <Description>SUSE Bug 1008253</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020873</URL>
        <Description>SUSE Bug 1020873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/998309</URL>
        <Description>SUSE Bug 998309</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).</Note>
    </Notes>
    <CVE>CVE-2017-3238</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3238.html</URL>
        <Description>CVE-2017-3238</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020882</URL>
        <Description>SUSE Bug 1020882</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).</Note>
    </Notes>
    <CVE>CVE-2017-3243</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3243.html</URL>
        <Description>CVE-2017-3243</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020891</URL>
        <Description>SUSE Bug 1020891</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).</Note>
    </Notes>
    <CVE>CVE-2017-3244</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3244.html</URL>
        <Description>CVE-2017-3244</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020877</URL>
        <Description>SUSE Bug 1020877</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).</Note>
    </Notes>
    <CVE>CVE-2017-3257</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3257.html</URL>
        <Description>CVE-2017-3257</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020878</URL>
        <Description>SUSE Bug 1020878</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).</Note>
    </Notes>
    <CVE>CVE-2017-3258</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3258.html</URL>
        <Description>CVE-2017-3258</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020875</URL>
        <Description>SUSE Bug 1020875</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts).</Note>
    </Notes>
    <CVE>CVE-2017-3265</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5.5</BaseScoreV2>
        <VectorV2>AV:L/AC:H/Au:S/C:C/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.6</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3265.html</URL>
        <Description>CVE-2017-3265</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020885</URL>
        <Description>SUSE Bug 1020885</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).</Note>
    </Notes>
    <CVE>CVE-2017-3291</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6</BaseScoreV2>
        <VectorV2>AV:L/AC:H/Au:S/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3291.html</URL>
        <Description>CVE-2017-3291</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020884</URL>
        <Description>SUSE Bug 1020884</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/998309</URL>
        <Description>SUSE Bug 998309</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).</Note>
    </Notes>
    <CVE>CVE-2017-3312</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.2</BaseScoreV2>
        <VectorV2>AV:L/AC:H/Au:N/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3312.html</URL>
        <Description>CVE-2017-3312</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020873</URL>
        <Description>SUSE Bug 1020873</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/998309</URL>
        <Description>SUSE Bug 998309</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).</Note>
    </Notes>
    <CVE>CVE-2017-3317</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>3.8</BaseScoreV2>
        <VectorV2>AV:L/AC:H/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3317.html</URL>
        <Description>CVE-2017-3317</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020894</URL>
        <Description>SUSE Bug 1020894</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).</Note>
    </Notes>
    <CVE>CVE-2017-3318</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP1:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmysqlclient18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-client-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-errormessages-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP2:mariadb-tools-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP1:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld-devel-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP2:libmysqld18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-10.0.29-22.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP2:libmysqlclient_r18-32bit-10.0.29-22.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>1</BaseScoreV2>
        <VectorV2>AV:L/AC:H/Au:S/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20170412-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3318.html</URL>
        <Description>CVE-2017-3318</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020868</URL>
        <Description>SUSE Bug 1020868</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020896</URL>
        <Description>SUSE Bug 1020896</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
