<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for mariadb-100</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2019:3370-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2019-12-20T06:22:15Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2019-12-20T06:22:15Z</InitialReleaseDate>
    <CurrentReleaseDate>2019-12-20T06:22:15Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for mariadb-100</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for mariadb-100 fixes the following issues:

Security issue fixed:

- CVE-2019-2974: Fixed Server Optimizer (bsc#1154162).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2019-3370,SUSE-SLE-DESKTOP-12-SP4-2019-3370,SUSE-SLE-SDK-12-SP4-2019-3370,SUSE-SLE-SDK-12-SP5-2019-3370,SUSE-SLE-SERVER-12-SP4-2019-3370,SUSE-SLE-SERVER-12-SP5-2019-3370,SUSE-SLE-WE-12-SP4-2019-3370,SUSE-SLE-WE-12-SP5-2019-3370</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20193370-1/</URL>
      <Description>Link for SUSE-SU-2019:3370-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2019-December/006279.html</URL>
      <Description>E-Mail link for SUSE-SU-2019:3370-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1154162</URL>
      <Description>SUSE Bug 1154162</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-2974/</URL>
      <Description>SUSE CVE CVE-2019-2974 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP4" CPE="cpe:/o:suse:sled:12:sp4">SUSE Linux Enterprise Desktop 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4" CPE="cpe:/o:suse:sles:12:sp4">SUSE Linux Enterprise Server 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5" CPE="cpe:/o:suse:sles:12:sp5">SUSE Linux Enterprise Server 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4" CPE="cpe:/o:suse:sles_sap:12:sp4">SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5" CPE="cpe:/o:suse:sles_sap:12:sp5">SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP4" CPE="cpe:/o:suse:sle-sdk:12:sp4">SUSE Linux Enterprise Software Development Kit 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5" CPE="cpe:/o:suse:sle-sdk:12:sp5">SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Workstation Extension 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP4" CPE="cpe:/o:suse:sle-we:12:sp4">SUSE Linux Enterprise Workstation Extension 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Workstation Extension 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP5" CPE="cpe:/o:suse:sle-we:12:sp5">SUSE Linux Enterprise Workstation Extension 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient-devel-10.0.40.2-2.12.2">
      <FullProductName ProductID="libmysqlclient-devel-10.0.40.2-2.12.2">libmysqlclient-devel-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient18-10.0.40.2-2.12.2">
      <FullProductName ProductID="libmysqlclient18-10.0.40.2-2.12.2">libmysqlclient18-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient18-32bit-10.0.40.2-2.12.2">
      <FullProductName ProductID="libmysqlclient18-32bit-10.0.40.2-2.12.2">libmysqlclient18-32bit-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient18-64bit-10.0.40.2-2.12.2">
      <FullProductName ProductID="libmysqlclient18-64bit-10.0.40.2-2.12.2">libmysqlclient18-64bit-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient_r18-10.0.40.2-2.12.2">
      <FullProductName ProductID="libmysqlclient_r18-10.0.40.2-2.12.2">libmysqlclient_r18-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient_r18-32bit-10.0.40.2-2.12.2">
      <FullProductName ProductID="libmysqlclient_r18-32bit-10.0.40.2-2.12.2">libmysqlclient_r18-32bit-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqlclient_r18-64bit-10.0.40.2-2.12.2">
      <FullProductName ProductID="libmysqlclient_r18-64bit-10.0.40.2-2.12.2">libmysqlclient_r18-64bit-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqld-devel-10.0.40.2-2.12.2">
      <FullProductName ProductID="libmysqld-devel-10.0.40.2-2.12.2">libmysqld-devel-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libmysqld18-10.0.40.2-2.12.2">
      <FullProductName ProductID="libmysqld18-10.0.40.2-2.12.2">libmysqld18-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-100-10.0.40.2-2.12.2">
      <FullProductName ProductID="mariadb-100-10.0.40.2-2.12.2">mariadb-100-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-100-bench-10.0.40.2-2.12.2">
      <FullProductName ProductID="mariadb-100-bench-10.0.40.2-2.12.2">mariadb-100-bench-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-100-client-10.0.40.2-2.12.2">
      <FullProductName ProductID="mariadb-100-client-10.0.40.2-2.12.2">mariadb-100-client-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-100-errormessages-10.0.40.2-2.12.2">
      <FullProductName ProductID="mariadb-100-errormessages-10.0.40.2-2.12.2">mariadb-100-errormessages-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-100-test-10.0.40.2-2.12.2">
      <FullProductName ProductID="mariadb-100-test-10.0.40.2-2.12.2">mariadb-100-test-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mariadb-100-tools-10.0.40.2-2.12.2">
      <FullProductName ProductID="mariadb-100-tools-10.0.40.2-2.12.2">mariadb-100-tools-10.0.40.2-2.12.2</FullProductName>
    </Branch>
    <Relationship ProductReference="libmysqlclient18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP4:libmysqlclient18-10.0.40.2-2.12.2">libmysqlclient18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Desktop 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP4:libmysqlclient18-32bit-10.0.40.2-2.12.2">libmysqlclient18-32bit-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Desktop 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP4:libmysqlclient_r18-10.0.40.2-2.12.2">libmysqlclient_r18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Desktop 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-32bit-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP4:libmysqlclient_r18-32bit-10.0.40.2-2.12.2">libmysqlclient_r18-32bit-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Desktop 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-100-errormessages-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP4:mariadb-100-errormessages-10.0.40.2-2.12.2">mariadb-100-errormessages-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Desktop 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4:libmysqlclient18-10.0.40.2-2.12.2">libmysqlclient18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4:libmysqlclient18-32bit-10.0.40.2-2.12.2">libmysqlclient18-32bit-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-100-errormessages-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4:mariadb-100-errormessages-10.0.40.2-2.12.2">mariadb-100-errormessages-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:libmysqlclient18-10.0.40.2-2.12.2">libmysqlclient18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:libmysqlclient18-32bit-10.0.40.2-2.12.2">libmysqlclient18-32bit-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-100-errormessages-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:mariadb-100-errormessages-10.0.40.2-2.12.2">mariadb-100-errormessages-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmysqlclient18-10.0.40.2-2.12.2">libmysqlclient18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmysqlclient18-32bit-10.0.40.2-2.12.2">libmysqlclient18-32bit-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-100-errormessages-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-100-errormessages-10.0.40.2-2.12.2">mariadb-100-errormessages-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmysqlclient18-10.0.40.2-2.12.2">libmysqlclient18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient18-32bit-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmysqlclient18-32bit-10.0.40.2-2.12.2">libmysqlclient18-32bit-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mariadb-100-errormessages-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-100-errormessages-10.0.40.2-2.12.2">mariadb-100-errormessages-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient-devel-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP4:libmysqlclient-devel-10.0.40.2-2.12.2">libmysqlclient-devel-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP4:libmysqlclient_r18-10.0.40.2-2.12.2">libmysqlclient_r18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld-devel-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP4:libmysqld-devel-10.0.40.2-2.12.2">libmysqld-devel-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP4:libmysqld18-10.0.40.2-2.12.2">libmysqld18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient-devel-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5:libmysqlclient-devel-10.0.40.2-2.12.2">libmysqlclient-devel-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5:libmysqlclient_r18-10.0.40.2-2.12.2">libmysqlclient_r18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld-devel-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5:libmysqld-devel-10.0.40.2-2.12.2">libmysqld-devel-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqld18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12 SP5:libmysqld18-10.0.40.2-2.12.2">libmysqld18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP4:libmysqlclient_r18-10.0.40.2-2.12.2">libmysqlclient_r18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-32bit-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP4:libmysqlclient_r18-32bit-10.0.40.2-2.12.2">libmysqlclient_r18-32bit-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP5:libmysqlclient_r18-10.0.40.2-2.12.2">libmysqlclient_r18-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libmysqlclient_r18-32bit-10.0.40.2-2.12.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP5:libmysqlclient_r18-32bit-10.0.40.2-2.12.2">libmysqlclient_r18-32bit-10.0.40.2-2.12.2 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).</Note>
    </Notes>
    <CVE>CVE-2019-2974</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP4:libmysqlclient18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP4:libmysqlclient18-32bit-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP4:libmysqlclient_r18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP4:libmysqlclient_r18-32bit-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP4:mariadb-100-errormessages-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4:libmysqlclient18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4:libmysqlclient18-32bit-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4:mariadb-100-errormessages-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:libmysqlclient18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:libmysqlclient18-32bit-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:mariadb-100-errormessages-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmysqlclient18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmysqlclient18-32bit-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-100-errormessages-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmysqlclient18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmysqlclient18-32bit-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-100-errormessages-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP4:libmysqlclient-devel-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP4:libmysqlclient_r18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP4:libmysqld-devel-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP4:libmysqld18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:libmysqlclient-devel-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:libmysqlclient_r18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:libmysqld-devel-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12 SP5:libmysqld18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP4:libmysqlclient_r18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP4:libmysqlclient_r18-32bit-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP5:libmysqlclient_r18-10.0.40.2-2.12.2</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP5:libmysqlclient_r18-32bit-10.0.40.2-2.12.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2019/suse-su-20193370-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-2974.html</URL>
        <Description>CVE-2019-2974</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1154162</URL>
        <Description>SUSE Bug 1154162</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1156669</URL>
        <Description>SUSE Bug 1156669</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
