Re: CVE Request: MySQL: MyISAM temporary file issue

[Ritwik Ghoshal <ritwik.ghoshal () oracle com>]

On 9/11/2014 7:39 AM, Tomas Hoger wrote:
> April CPU mentions client issue CVE-2014-2440.  Is it the same issue
> that got CVE-2014-0001 publicly assigned before?  The versions that
> fixed CVE-2014-2440 are the same that got CVE-2014-0001 fix, and there's
> no mention of the CVE-2014-0001 in April CPU.


Yes, CVE-2014-2440 is same as CVE-2014-0001. We have updated our CPU
April, 14 advisory with a note under MySQL risk matrix that states the
same. Please see -
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

Thanks,
-Ritwik