Re: CVE Request: MySQL: MyISAM temporary file issue

[Ritwik Ghoshal <ritwik.ghoshal () oracle com>]

On 9/11/2014 1:28 AM, Sven Kieske wrote:
> On 10/09/14 18:00, Salvatore Bonaccorso wrote:
> > Hi
> >
> > The changes for MySQL 5.5.39[1] and 5.6.20[2] contain a reference to
> > the following issue, which could be exploited by a local user to run
> > arbitrary code in context of the mysqld server.
>
> While I'm investigating this:
> Does someone happen to know in which version this vuln got introduced?

A complete list of all affected-supported MySQL releases will be
published via Oracle's quarterly Critical Patch Update(CPU) advisory.
More information about our CPU program is available at -
http://www.oracle.com/technetwork/topics/security/alerts-086861.html


Thanks,
-Ritwik