Upstream information
Description
MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)
Novell/SUSE information
Novell Bugzilla entry: 557669, 604528 SUSE Security Advisories:- SUSE-SR:2010:007, published Tue, 30 Mar 2010 10:00:00 +0000
- SUSE-SR:2010:011, published Mon, 10 May 2010 14:00:00 +0000
- SUSE-SR:2010:021, published Tue, 16 Nov 2010 13:00:00 +0000
- openSUSE-SU-2010:0198-1, published Mon, 3 May 2010 16:36:34 +0200 (CEST)
- openSUSE-SU-2010:0198-2, published Tue, 4 May 2010 21:08:16 +0200 (CEST)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE 11.0 |
| |
| openSUSE 11.0 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.2 |
| |
| openSUSE 11.2 |
| |
| SUSE CORE 9 for AMD64 and Intel EM64T |
| Builds YOU Patch Nr: 12756 |
| SUSE Linux Enterprise Desktop 10 SP3 for x86 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise SDK 10 SP3 SUSE Linux Enterprise Server 10 SP3 SUSE Linux Enterprise Server for SAP 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise Server 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise Server 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| SUSE Linux Enterprise Server 10 SP3 |
| sled10-sp3.x86-64 sle10-sp3-sdk.ppc sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.s390x sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3.x86 sles10-sp3.x86-64 sles10-sp3.ia64 sle10-sp3-sdk.x86 sles10-sp3-debuginfo.s390x sles10-sp3.s390x sles10-sp3.ppc sled10-sp3.x86 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 6899 |
| openSUSE 11.0 |
| |
| openSUSE 11.0 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.2 |
| |
| openSUSE 11.2 |
| |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise SDK 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise SDK 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise SDK 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise Desktop 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise Desktop 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise Server 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise Server 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| SUSE Linux Enterprise Server 11 GA |
| sled11.x86 sle11-sdk.x86 sles11.x86-64 sles11.x86 sle11-sdk.x86-64 sle11-sdk.ppc sles11.ppc sles11.s390x sles11.ia64 sle11-sdk.s390x sle11-sdk.ia64 sled11.x86-64 SAT Patch Nr: 2317 |
| Open Enterprise Server |
| sles9-nlpos.x86 core9.s390x core9.ia64 core9.ppc core9.x86 core9.x86 core9.x86-64 core9.ppc core9.s390 core9.s390 core9.s390x core9.ia64 core9.x86-64 sles9-oes.x86 YOU Patch Nr: 12661 |
| SLES SDK 9 for IBM S/390 and IBM zSeries SLES SDK 9 for IBM iSeries and IBM pSeries SLES SDK 9 for IBM zSeries SLES SDK 9 for IPF SLES SDK 9 for X86-64 SLES SDK 9 for x86 |
| sles9-nlpos.x86 core9.s390x core9.ia64 core9.ppc core9.x86 core9.x86 core9.x86-64 core9.ppc core9.s390 core9.s390 core9.s390x core9.ia64 core9.x86-64 sles9-oes.x86 YOU Patch Nr: 12661 |
| SUSE Linux Enterprise 10 SP2 DEBUGINFO for AMD64 and Intel EM64T SUSE Linux Enterprise 10 SP2 DEBUGINFO for IBM zSeries 64bit SUSE Linux Enterprise 10 SP2 DEBUGINFO for x86 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
| SUSE Linux Enterprise Server for SAP 10 SP2 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
| SUSE Linux Enterprise SDK 10 SP2 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
| SUSE Linux Enterprise SDK 10 SP2 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
| SUSE Linux Enterprise SDK 10 SP2 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
| SUSE Linux Enterprise SDK 10 SP2 |
| sles10-sp2.s390x sles10-sp2.ia64 sled10-sp2.x86 sle10-sp2-sdk.x86-64 sled10-sp2.x86-64 sles10-sp2.x86 sles10-sp2-debuginfo.ppc sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.ppc sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.x86-64 sles10-sp2.ppc sle10-sp2-sdk.s390x sles10-sp2-debuginfo.ia64 sles10-sp2-debuginfo.s390x sles10-sp2-debuginfo.x86 ZYPP Patch Nr: 6897 |
