Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

openSUSE Leap 15.4 & 15.5 SUSE-SU-2023:2979-1 Moderate Denial-of-Service

opensuse
Calendar Grey July 26, 2023
Dist Opensuse Esm H88
A significant security patch has been released for mysql-connector-java to fix denial-of-service vulnerabilities in openSUSE deployments.
This update for mysql-connector-java fixes the following issues: CVE-2023-21971: Fixed a denial-of-service vulnerability in the java.sql.DriverManager.getConnection() method when u...

Description

This update for mysql-connector-java fixes the following issues:

* CVE-2023-21971: Fixed a denial-of-service vulnerability in the

java.sql.DriverManager.getConnection() method when used with untrusted

inputs (bsc#1211247).

Topics%20covered

Topics Covered

security advisory moderate denial-of-service openSUSE mysql-connector

Patch

## Patch Instructions:

To install this SUSE Moderate update use the SUSE recommended installation

methods like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch openSUSE-SLE-15.4-2023-2979=1

* openSUSE Leap 15.5

zypper in -t patch openSUSE-SLE-15.5-2023-2979=1

Package List

* openSUSE Leap 15.4 (noarch)

* mysql-connector-java-8.0.33-150200.3.18.1

* openSUSE Leap 15.5 (noarch)

* mysql-connector-java-8.0.33-150200.3.18.1

References

* #1211247

## References:

* https://www.suse.com/security/cve/CVE-2023-21971.html

* https://bugzilla.suse.com/show_bug.cgi?id=1211247

Announcement ID: SUSE-SU-2023:2979-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial-of-service openSUSE mysql-connector

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here