Upstream information
Description
The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Novell/SUSE information
Novell Bugzilla entry: 557669, 604528 SUSE Security Advisories:- SUSE-SR:2010:007, published Tue, 30 Mar 2010 10:00:00 +0000
- SUSE-SR:2010:011, published Mon, 10 May 2010 14:00:00 +0000
- openSUSE-SU-2010:0198-1, published Mon, 3 May 2010 16:36:34 +0200 (CEST)
- openSUSE-SU-2010:0198-2, published Tue, 4 May 2010 21:08:16 +0200 (CEST)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE 11.0 |
| |
| openSUSE 11.0 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.2 |
| |
| openSUSE 11.2 |
| |
| SUSE CORE 9 for AMD64 and Intel EM64T |
| Builds YOU Patch Nr: 12756 |
| SUSE Linux Enterprise Desktop 10 SP3 for x86 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise SDK 10 SP3 SUSE Linux Enterprise Server 10 SP3 SUSE Linux Enterprise Server for SAP 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise Server 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise Server 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise Server 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| openSUSE 11.0 |
| |
| openSUSE 11.0 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.2 |
| |
| openSUSE 11.2 |
| |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise SDK 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise SDK 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise SDK 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise Desktop 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise Desktop 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise Server 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise Server 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise Server 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise 10 SP2 DEBUGINFO for AMD64 and Intel EM64T SUSE Linux Enterprise 10 SP2 DEBUGINFO for IBM zSeries 64bit SUSE Linux Enterprise 10 SP2 DEBUGINFO for x86 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
| SUSE Linux Enterprise Server for SAP 10 SP2 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
| SUSE Linux Enterprise SDK 10 SP2 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
| SUSE Linux Enterprise SDK 10 SP2 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
| SUSE Linux Enterprise SDK 10 SP2 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
| SUSE Linux Enterprise SDK 10 SP2 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
