CVE:CVE-2015-5969
CNNVD:CNNVD-201604-135
Novell openSUSE是美国Novell公司的一套基于Linux的自由操作系统。mysql-community-server package是其中的一个数据库安装包。openSUSE Leap是openSUSE的一个版本。
Novell openSUSE的mysql-community-server和mariadb中的mysql-systemd-helper脚本存在安全漏洞。本地攻击者可通过列出进程及其参数利用该漏洞发现数据库证书。以下产品及版本受到影响：openSUSE 13.2版本，5.6.28-13.1之前版本，10.0.22-3.1之前版本，openSUSE Leap 42.1版本，SUSE Linux Enterprise(SLE) 12.1版本，mysql-community-server 5.6.28-2.17.1之前版本，mariadb 10.0.22-2.21.2之前版本。
solution:Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade suse linux_enterprise_desktop to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_server to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_software_development_kit to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_workstation_extension to a higher version than 12:sp1,and avoid the version 12:sp1