Stay Secure with the Latest Linux Advisories

security advisoryvulnerabilitylocal attack

Mageia 7: MGASA-2020-0369 Critical: Mysql-Connector-Java Local Attack

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands (CVE-2020-2934). . MGASA-2020-0369 - Updated mysql-connector-java package fixes security vulnerability Publication date: 21 Sep 2020 URL: https://advisories.mageia.org/MGASA-2020-0369.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-2934 A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands (CVE-2020-2934). References: - https://bugs.mageia.org/show_bug.cgi?id=26522 - https://dev.mysql.com/doc/relnotes/connector-j/8.0/en/news-8-0-20.html - https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/4QDR2WOUETBT76WAO5NNCCXSAM3AGG3D/ - https://www.cve.org/CVERecord?id=CVE-2020-2934 SRPMS: - 7/core/mysql-connector-java-8.0.20-1.mga7 . The latest mysql-connector-java update resolves a significant local security flaw that permitted SQL command injection, enhancing data protection protocols.. mysql connector,jdbc attack,security advisory,Mageia,local network exploit. . Severity: Critical. LinuxSecurity.com Team

Sep 21, 2020 •Critical Mageia