Security update for mysql-connector-java SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2022:0658-1 Final 1 1 2022-03-02T10:06:16Z current 2022-03-02T10:06:16Z 2022-03-02T10:06:16Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mysql-connector-java This update for mysql-connector-java fixes the following issues: - CVE-2021-2471: Fixed unauthorized access to critical data or complete access to all MySQL Connectors (bsc#1195557). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-SLE-15.3-2022-658,openSUSE-SLE-15.4-2022-658 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FPABDE53LLJDPCFTIOU2DXOPZRS7JPVT/ E-Mail link for openSUSE-SU-2022:0658-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1195557 SUSE Bug 1195557 https://www.suse.com/security/cve/CVE-2021-2471/ SUSE CVE CVE-2021-2471 page openSUSE Leap 15.3 mysql-connector-java-5.1.47-3.6.1 mysql-connector-java-5.1.47-3.6.1 as a component of openSUSE Leap 15.3 Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H). CVE-2021-2471 openSUSE Leap 15.3:mysql-connector-java-5.1.47-3.6.1 moderate 7.9 AV:N/AC:M/Au:S/C:C/I:N/A:C 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FPABDE53LLJDPCFTIOU2DXOPZRS7JPVT/ https://www.suse.com/security/cve/CVE-2021-2471.html CVE-2021-2471 https://bugzilla.suse.com/1195557 SUSE Bug 1195557