Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.announce.security > #3226 > unrolled thread

[SECURITY] [DSA 4703-1] mysql-connector-java security update

Back to article view | Back to linux.debian.announce.security

Contents

  [SECURITY] [DSA 4703-1] mysql-connector-java security update Moritz Muehlenhoff <jmm@debian.org> - 2020-06-11 20:00 +0200

#3226 — [SECURITY] [DSA 4703-1] mysql-connector-java security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4703-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
June 11, 2020                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : mysql-connector-java
CVE ID         : CVE-2020-2875 CVE-2020-2933 CVE-2020-2934

Three vulnerabilities have been found in the MySQL Connector/J JDBC
driver.
   
For the oldstable distribution (stretch), these problems have been fixed
in version 5.1.49-0+deb9u1.

We recommend that you upgrade your mysql-connector-java packages.

For the detailed security status of mysql-connector-java please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/mysql-connector-java

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=H7wp
-----END PGP SIGNATURE-----

[toc] | [standalone]

Back to top | Article view | linux.debian.announce.security

csiph-web