<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for mysql</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2017:1137-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2017-04-28T15:34:16Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2017-04-28T15:34:16Z</InitialReleaseDate>
    <CurrentReleaseDate>2017-04-28T15:34:16Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for mysql</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
This update for mysql to version 5.5.55 fixes the following issues:

These security issues were fixed:

- CVE-2017-3308: Unspecified vulnerability in Server: DML (bsc#1034850)
- CVE-2017-3309: Unspecified vulnerability in Server: Optimizer (bsc#1034850)
- CVE-2017-3329: Unspecified vulnerability in Server: Thread (bsc#1034850)
- CVE-2017-3600: Unspecified vulnerability in Client: mysqldump (bsc#1034850)
- CVE-2017-3453: Unspecified vulnerability in Server: Optimizer (bsc#1034850)
- CVE-2017-3456: Unspecified vulnerability in Server: DML (bsc#1034850)
- CVE-2017-3463: Unspecified vulnerability in Server: Security (bsc#1034850)
- CVE-2017-3462: Unspecified vulnerability in Server: Security (bsc#1034850)
- CVE-2017-3461: Unspecified vulnerability in Server: Security (bsc#1034850)
- CVE-2017-3464: Unspecified vulnerability in Server: DDL (bsc#1034850)
- CVE-2017-3305: MySQL client sent authentication request unencrypted even if SSL was required (aka Ridddle) (bsc#1029396).
- CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands (bsc#1029014)
- '--ssl-mode=REQUIRED' can be specified to require a secure connection (it fails if a secure connection cannot be obtained)

This non-security issue was fixed:

- Set the default umask to 077 in rc.mysql-multi [bsc#1020976]

For additional changes please see
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-55.html

Note: The issue tracked in bsc#1022428 and fixed in the last update was
assigned CVE-2017-3302.
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">sdksp4-mysql-13081,slessp4-mysql-13081</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      <Description>Link for SUSE-SU-2017:1137-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2017-April/002833.html</URL>
      <Description>E-Mail link for SUSE-SU-2017:1137-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1020976</URL>
      <Description>SUSE Bug 1020976</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1022428</URL>
      <Description>SUSE Bug 1022428</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1029014</URL>
      <Description>SUSE Bug 1029014</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1029396</URL>
      <Description>SUSE Bug 1029396</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1034850</URL>
      <Description>SUSE Bug 1034850</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-5483/</URL>
      <Description>SUSE CVE CVE-2016-5483 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3302/</URL>
      <Description>SUSE CVE CVE-2017-3302 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3305/</URL>
      <Description>SUSE CVE CVE-2017-3305 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3308/</URL>
      <Description>SUSE CVE CVE-2017-3308 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3309/</URL>
      <Description>SUSE CVE CVE-2017-3309 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3329/</URL>
      <Description>SUSE CVE CVE-2017-3329 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3453/</URL>
      <Description>SUSE CVE CVE-2017-3453 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3456/</URL>
      <Description>SUSE CVE CVE-2017-3456 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3461/</URL>
      <Description>SUSE CVE CVE-2017-3461 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3462/</URL>
      <Description>SUSE CVE CVE-2017-3462 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3463/</URL>
      <Description>SUSE CVE CVE-2017-3463 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3464/</URL>
      <Description>SUSE CVE CVE-2017-3464 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-3600/</URL>
      <Description>SUSE CVE CVE-2017-3600 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4" CPE="cpe:/o:suse:suse_sles:11:sp4">SUSE Linux Enterprise Server 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4" CPE="cpe:/o:suse:sles_sap:11:sp4">SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4" CPE="cpe:/a:suse:sle-sdk:11:sp4">SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client_r18-32bit-5.5.55-0.38.1">
      <FullProductName ProductID="libmysql55client_r18-32bit-5.5.55-0.38.1">libmysql55client_r18-32bit-5.5.55-0.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client_r18-x86-5.5.55-0.38.1">
      <FullProductName ProductID="libmysql55client_r18-x86-5.5.55-0.38.1">libmysql55client_r18-x86-5.5.55-0.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client18-5.5.55-0.38.1">
      <FullProductName ProductID="libmysql55client18-5.5.55-0.38.1">libmysql55client18-5.5.55-0.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client18-32bit-5.5.55-0.38.1">
      <FullProductName ProductID="libmysql55client18-32bit-5.5.55-0.38.1">libmysql55client18-32bit-5.5.55-0.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client18-x86-5.5.55-0.38.1">
      <FullProductName ProductID="libmysql55client18-x86-5.5.55-0.38.1">libmysql55client18-x86-5.5.55-0.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysql55client_r18-5.5.55-0.38.1">
      <FullProductName ProductID="libmysql55client_r18-5.5.55-0.38.1">libmysql55client_r18-5.5.55-0.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mysql-5.5.55-0.38.1">
      <FullProductName ProductID="mysql-5.5.55-0.38.1">mysql-5.5.55-0.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mysql-client-5.5.55-0.38.1">
      <FullProductName ProductID="mysql-client-5.5.55-0.38.1">mysql-client-5.5.55-0.38.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mysql-tools-5.5.55-0.38.1">
      <FullProductName ProductID="mysql-tools-5.5.55-0.38.1">mysql-tools-5.5.55-0.38.1</FullProductName>
    </Branch>
    <Relationship ProductReference="libmysql55client18-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1">libmysql55client18-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-32bit-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1">libmysql55client18-32bit-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-x86-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1">libmysql55client18-x86-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1">libmysql55client_r18-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-32bit-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1">libmysql55client_r18-32bit-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-x86-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1">libmysql55client_r18-x86-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1">mysql-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-client-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1">mysql-client-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-tools-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1">mysql-tools-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1">libmysql55client18-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-32bit-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1">libmysql55client18-32bit-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client18-x86-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1">libmysql55client18-x86-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1">libmysql55client_r18-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-32bit-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1">libmysql55client_r18-32bit-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-x86-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1">libmysql55client_r18-x86-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1">mysql-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-client-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1">mysql-client-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mysql-tools-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1">mysql-tools-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-32bit-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1">libmysql55client_r18-32bit-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysql55client_r18-x86-5.5.55-0.38.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1">libmysql55client_r18-x86-5.5.55-0.38.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-3600.  Reason: This candidate is a reservation duplicate of CVE-2017-3600.  Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.</Note>
    </Notes>
    <CVE>CVE-2016-5483</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-5483.html</URL>
        <Description>CVE-2016-5483</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1001367</URL>
        <Description>SUSE Bug 1001367</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005555</URL>
        <Description>SUSE Bug 1005555</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005557</URL>
        <Description>SUSE Bug 1005557</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005561</URL>
        <Description>SUSE Bug 1005561</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005562</URL>
        <Description>SUSE Bug 1005562</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005563</URL>
        <Description>SUSE Bug 1005563</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005564</URL>
        <Description>SUSE Bug 1005564</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005566</URL>
        <Description>SUSE Bug 1005566</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005569</URL>
        <Description>SUSE Bug 1005569</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005570</URL>
        <Description>SUSE Bug 1005570</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1005582</URL>
        <Description>SUSE Bug 1005582</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020875</URL>
        <Description>SUSE Bug 1020875</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020876</URL>
        <Description>SUSE Bug 1020876</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020877</URL>
        <Description>SUSE Bug 1020877</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020878</URL>
        <Description>SUSE Bug 1020878</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020882</URL>
        <Description>SUSE Bug 1020882</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020883</URL>
        <Description>SUSE Bug 1020883</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020884</URL>
        <Description>SUSE Bug 1020884</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020885</URL>
        <Description>SUSE Bug 1020885</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020888</URL>
        <Description>SUSE Bug 1020888</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020890</URL>
        <Description>SUSE Bug 1020890</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020891</URL>
        <Description>SUSE Bug 1020891</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020893</URL>
        <Description>SUSE Bug 1020893</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020894</URL>
        <Description>SUSE Bug 1020894</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020896</URL>
        <Description>SUSE Bug 1020896</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020898</URL>
        <Description>SUSE Bug 1020898</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020901</URL>
        <Description>SUSE Bug 1020901</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022428</URL>
        <Description>SUSE Bug 1022428</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1029014</URL>
        <Description>SUSE Bug 1029014</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1029396</URL>
        <Description>SUSE Bug 1029396</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049393</URL>
        <Description>SUSE Bug 1049393</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049394</URL>
        <Description>SUSE Bug 1049394</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049396</URL>
        <Description>SUSE Bug 1049396</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049399</URL>
        <Description>SUSE Bug 1049399</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049400</URL>
        <Description>SUSE Bug 1049400</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049401</URL>
        <Description>SUSE Bug 1049401</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049402</URL>
        <Description>SUSE Bug 1049402</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049403</URL>
        <Description>SUSE Bug 1049403</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049404</URL>
        <Description>SUSE Bug 1049404</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049405</URL>
        <Description>SUSE Bug 1049405</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049406</URL>
        <Description>SUSE Bug 1049406</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049407</URL>
        <Description>SUSE Bug 1049407</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049408</URL>
        <Description>SUSE Bug 1049408</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049409</URL>
        <Description>SUSE Bug 1049409</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049410</URL>
        <Description>SUSE Bug 1049410</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049411</URL>
        <Description>SUSE Bug 1049411</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049412</URL>
        <Description>SUSE Bug 1049412</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049414</URL>
        <Description>SUSE Bug 1049414</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049415</URL>
        <Description>SUSE Bug 1049415</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049416</URL>
        <Description>SUSE Bug 1049416</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1049417</URL>
        <Description>SUSE Bug 1049417</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1064101</URL>
        <Description>SUSE Bug 1064101</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1064107</URL>
        <Description>SUSE Bug 1064107</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1064115</URL>
        <Description>SUSE Bug 1064115</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1064116</URL>
        <Description>SUSE Bug 1064116</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1064117</URL>
        <Description>SUSE Bug 1064117</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.</Note>
    </Notes>
    <CVE>CVE-2017-3302</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3302.html</URL>
        <Description>CVE-2017-3302</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1022428</URL>
        <Description>SUSE Bug 1022428</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034911</URL>
        <Description>SUSE Bug 1034911</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue allows man-in-the-middle attackers to hijack the authentication of users by leveraging incorrect ordering of security parameter verification in a client, aka, "The Riddle".</Note>
    </Notes>
    <CVE>CVE-2017-3305</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:N/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3305.html</URL>
        <Description>CVE-2017-3305</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1029396</URL>
        <Description>SUSE Bug 1029396</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1037590</URL>
        <Description>SUSE Bug 1037590</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/924663</URL>
        <Description>SUSE Bug 924663</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).</Note>
    </Notes>
    <CVE>CVE-2017-3308</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3308.html</URL>
        <Description>CVE-2017-3308</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1048715</URL>
        <Description>SUSE Bug 1048715</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).</Note>
    </Notes>
    <CVE>CVE-2017-3309</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3309.html</URL>
        <Description>CVE-2017-3309</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1048715</URL>
        <Description>SUSE Bug 1048715</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Thread Pooling). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).</Note>
    </Notes>
    <CVE>CVE-2017-3329</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3329.html</URL>
        <Description>CVE-2017-3329</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1048715</URL>
        <Description>SUSE Bug 1048715</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).</Note>
    </Notes>
    <CVE>CVE-2017-3453</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3453.html</URL>
        <Description>CVE-2017-3453</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1048715</URL>
        <Description>SUSE Bug 1048715</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).</Note>
    </Notes>
    <CVE>CVE-2017-3456</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.9</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3456.html</URL>
        <Description>CVE-2017-3456</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1048715</URL>
        <Description>SUSE Bug 1048715</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).</Note>
    </Notes>
    <CVE>CVE-2017-3461</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.9</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3461.html</URL>
        <Description>CVE-2017-3461</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1048715</URL>
        <Description>SUSE Bug 1048715</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).</Note>
    </Notes>
    <CVE>CVE-2017-3462</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.9</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3462.html</URL>
        <Description>CVE-2017-3462</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1048715</URL>
        <Description>SUSE Bug 1048715</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).</Note>
    </Notes>
    <CVE>CVE-2017-3463</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.9</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3463.html</URL>
        <Description>CVE-2017-3463</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1048715</URL>
        <Description>SUSE Bug 1048715</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).</Note>
    </Notes>
    <CVE>CVE-2017-3464</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:N/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3464.html</URL>
        <Description>CVE-2017-3464</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1048715</URL>
        <Description>SUSE Bug 1048715</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).</Note>
    </Notes>
    <CVE>CVE-2017-3600</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-client-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:mysql-tools-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-32bit-5.5.55-0.38.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:libmysql55client_r18-x86-5.5.55-0.38.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.6</BaseScoreV2>
        <VectorV2>AV:N/AC:H/Au:S/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.6</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2017/suse-su-20171137-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-3600.html</URL>
        <Description>CVE-2017-3600</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1029014</URL>
        <Description>SUSE Bug 1029014</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1034850</URL>
        <Description>SUSE Bug 1034850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1048715</URL>
        <Description>SUSE Bug 1048715</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
