Debian: DSA-2144-1 Critical: MySQL Remote Code Execution Vulnerability

Several vulnerabilities have been discovered in the MySQL
database server.
The Common Vulnerabilities and Exposures project identifies the
following problems:


CVE-2010-3677

It was discovered that MySQL allows remote authenticated users to cause
a denial of service (mysqld daemon crash) via a join query that uses a
table with a unique SET column.


CVE-2010-3680

It was discovered that MySQL allows remote authenticated users to cause
a denial of service (mysqld daemon crash) by creating temporary tables
while using InnoDB, which triggers an assertion failure.


CVE-2010-3681

It was discovered that MySQL allows remote authenticated users to cause
a denial of service (mysqld daemon crash) by using the HANDLER interface
and performing "alternate reads from two indexes on a table," which
triggers an assertion failure.


CVE-2010-3682

It was discovered that MySQL incorrectly handled use of EXPLAIN with
certain queries.
An authenticated user could crash the server.


CVE-2010-3833

It was disc...