Fedora 32: 2020-747ec39700 Critical: mysql-connector-java DoS Threat

MySQL Connector/J is a native Java driver that converts JDBC (Java Database

Connectivity) calls into the network protocol used by the MySQL database.

It lets developers working with the Java programming language easily build

programs and applets that interact with MySQL and connect all corporate

data, even in a heterogeneous environment. MySQL Connector/J is a Type

IV JDBC driver and has a complete JDBC feature set that supports the

capabilities of MySQL.

Rebased to version 8.0.21

* Tue Aug 25 2020 Ondrej Dubaj - 1:8.0.21-1

- rebase to version 8.0.21

[ 1 ] Bug #1851015 - CVE-2020-2934 mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1851015

[ 2 ] Bug #1851020 - CVE-2020-2875 mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1851020

[ 3 ] Bug #1851024 - CVE-2020-2933 mysql-connector-java: allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized partial DoS [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1851024

su -c 'dnf upgrade --advisory FEDORA-2020-747ec39700' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/