derby: Embeddable Database Engine Written in Java ---------------------------------------------------------------------- File: derby-10.3.1.4-0.2.noarch.rpm Patchrpm: derby-10.3.1.4-0.2.noarch.patch.rpm Version: 10.3.1.4-0.2 Size: 7876 kB Patchsize: 7875 kB Date: Thu 16 Aug 2007 1:49:28 CEST Source: derby-10.3.1.4-0.2.src.rpm Security: Yes ---------------------------------------------------------------------- Description: Apache Derby did not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode. (CVE-2006-7217) This update also brings a new requirement of a Java 1.5 JRE.