Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
202
security advisorymoderatesoftware patchopenSUSE: 2022:0658-1 Moderate: mysql-connector-java Access Issue
An update that fixes one vulnerability, contains one feature is now available. . openSUSE Security Update: Security update for mysql-connector-java ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0658-1 Rating: moderate References: #1195557 PM-3307 Cross-References: CVE-2021-2471 CVSS scores: CVE-2021-2471 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H CVE-2021-2471 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability, contains one feature is now available. Description: This update for mysql-connector-java fixes the following issues: - CVE-2021-2471: Fixed unauthorized access to critical data or complete access to all MySQL Connectors (bsc#1195557). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-658=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-658=1 Package List: - openSUSE Leap 15.4 (noarch): mysql-connector-java-5.1.47-3.6.1 - openSUSE Leap 15.3 (noarch): mysql-connector-java-5.1.47-3.6.1 References: https://www.suse.com/security/cve/CVE-2021-2471.html https://bugzilla.suse.com/1195557 . A recent release for openSUSE tackles a significant vulnerability in mysql-connector-java aimed at improving the safeguard of system information.. OpenSUSE Security Update, MySQL Connector Java, Security Fix. . LinuxSecurity.com Team
Mar 02, 2022
OpenSUSE
203
security advisorybuffer overflowDoSMageia 8: Security Advisory MGASA-2022-0035 for MySQL Connector DoS
Buffer overflow due to inccorect calculation in EVP_PKEY_decrypt. (CVE-2021-3711) Denial of Service attack due to possible non-zero terminated strings. (CVE-2021-3712) . MGASA-2022-0035 - Updated mysql-connector-c++ packages fix security vulnerability Publication date: 25 Jan 2022 URL: https://advisories.mageia.org/MGASA-2022-0035.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-3711, CVE-2021-3712 Buffer overflow due to inccorect calculation in EVP_PKEY_decrypt. (CVE-2021-3711) Denial of Service attack due to possible non-zero terminated strings. (CVE-2021-3712) References: - https://bugs.mageia.org/show_bug.cgi?id=29923 - https://www.oracle.com/security-alerts/cpujan2022.html#AppendixMSQL - https://www.cve.org/CVERecord?id=CVE-2021-3711 - https://www.cve.org/CVERecord?id=CVE-2021-3712 SRPMS: - 8/core/mysql-connector-c++-8.0.28-1.mga8 . Recent updates to the mysql-connector-c++ packages focus on rectifying buffer overflow and denial-of-service vulnerabilities identified in Mageia 8.. buffer overflow, denial of service, mysql connector, mageia security. . Severity: Important. LinuxSecurity.com Team
Jan 25, 2022
•Important
Mageia
100
security advisorymoderatedenial of serviceSUSE 2021:2877-1 Moderate: MySQL Connector Java Denial Of Service
An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for mysql-connector-java ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:2877-1 Rating: moderate References: #1173600 Cross-References: CVE-2020-2875 CVE-2020-2933 CVE-2020-2934 CVSS scores: CVE-2020-2875 (NVD) : 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-2875 (SUSE): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2020-2933 (NVD) : 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L CVE-2020-2933 (SUSE): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L CVE-2020-2934 (NVD) : 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2020-2934 (SUSE): 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L Affected Products: SUSE OpenStack Cloud Crowbar 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud 8 SUSE Linux Enterprise Software Development Kit 12-SP5 HPE Helion Openstack 8 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for mysql-connector-java fixes the following issues: - CVE-2020-2875: Unauthenticated attacker with network access via multiple protocols can compromise MySQL Connectors. (bsc#1173600) - CVE-2020-2934: Fixed a vulnerability which could cause a partial denial of service of MySQL Connectors. (bsc#1173600) - CVE-2020-2933: Fixed a vulnerability which could allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. (bsc#1173600) Patch Instructions: To install this SUSE Security Update use the SUSE recommendedinstallation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2021-2877=1 - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2021-2877=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2021-2877=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2021-2877=1 - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-2877=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2021-2877=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (noarch): mysql-connector-java-5.1.42-5.7.1 - SUSE OpenStack Cloud Crowbar 8 (noarch): mysql-connector-java-5.1.42-5.7.1 - SUSE OpenStack Cloud 9 (noarch): mysql-connector-java-5.1.42-5.7.1 - SUSE OpenStack Cloud 8 (noarch): mysql-connector-java-5.1.42-5.7.1 - SUSE Linux Enterprise Software Development Kit 12-SP5 (noarch): mysql-connector-java-5.1.42-5.7.1 - HPE Helion Openstack 8 (noarch): mysql-connector-java-5.1.42-5.7.1 References: https://www.suse.com/security/cve/CVE-2020-2875.html https://www.suse.com/security/cve/CVE-2020-2933.html https://www.suse.com/security/cve/CVE-2020-2934.html https://bugzilla.suse.com/1173600 . This enhancement tackles two significant concerns with mysql-connector-java that affect OpenSUSE versions. Act promptly!. MySQL Connector, SUSE Security, Network Issue, DoS Threat. . Severity: Important. LinuxSecurity.com Team
Aug 30, 2021
•Important
SuSE
203
security advisoryvulnerabilitylocal attackMageia 7: MGASA-2020-0369 Critical: Mysql-Connector-Java Local Attack
A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands (CVE-2020-2934). . MGASA-2020-0369 - Updated mysql-connector-java package fixes security vulnerability Publication date: 21 Sep 2020 URL: https://advisories.mageia.org/MGASA-2020-0369.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-2934 A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands (CVE-2020-2934). References: - https://bugs.mageia.org/show_bug.cgi?id=26522 - https://dev.mysql.com/doc/relnotes/connector-j/8.0/en/news-8-0-20.html - https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL - https://lists.fedoraproject.org/archives/list/
Sep 21, 2020
•Critical
Mageia
87
security advisorysoftware updatedebianDebian Jessie: DSA-3857-1 Critical: MySQL Connector/J Security Threat
Two vulnerabilities have been found in the MySQL Connector/J JDBC driver. For the stable distribution (jessie), these problems have been fixed in version 5.1.42-1~deb8u1. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3857-1
May 18, 2017
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!