Security update for mysql-connector-java SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1142-1 Final 1 1 2022-04-11T08:48:33Z current 2022-04-11T08:48:33Z 2022-04-11T08:48:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mysql-connector-java This update for mysql-connector-java fixes the following issues: - CVE-2021-2471: Fixed unauthorized access to critical data or complete access to all MySQL Connectors (bsc#1195557). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2022-1142,SUSE-2022-1142,SUSE-OpenStack-Cloud-8-2022-1142,SUSE-OpenStack-Cloud-9-2022-1142,SUSE-OpenStack-Cloud-Crowbar-8-2022-1142,SUSE-OpenStack-Cloud-Crowbar-9-2022-1142,SUSE-SLE-SDK-12-SP5-2022-1142 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221142-1/ Link for SUSE-SU-2022:1142-1 https://lists.suse.com/pipermail/sle-security-updates/2022-April/010675.html E-Mail link for SUSE-SU-2022:1142-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1195557 SUSE Bug 1195557 https://www.suse.com/security/cve/CVE-2021-2471/ SUSE CVE CVE-2021-2471 page HPE Helion OpenStack 8 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 mysql-connector-java-8.0.25-5.13.1 mysql-connector-java-8.0.25-5.13.1 as a component of HPE Helion OpenStack 8 mysql-connector-java-8.0.25-5.13.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 mysql-connector-java-8.0.25-5.13.1 as a component of SUSE OpenStack Cloud 8 mysql-connector-java-8.0.25-5.13.1 as a component of SUSE OpenStack Cloud 9 mysql-connector-java-8.0.25-5.13.1 as a component of SUSE OpenStack Cloud Crowbar 8 mysql-connector-java-8.0.25-5.13.1 as a component of SUSE OpenStack Cloud Crowbar 9 Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H). CVE-2021-2471 HPE Helion OpenStack 8:mysql-connector-java-8.0.25-5.13.1 SUSE Linux Enterprise Software Development Kit 12 SP5:mysql-connector-java-8.0.25-5.13.1 SUSE OpenStack Cloud 8:mysql-connector-java-8.0.25-5.13.1 SUSE OpenStack Cloud 9:mysql-connector-java-8.0.25-5.13.1 SUSE OpenStack Cloud Crowbar 8:mysql-connector-java-8.0.25-5.13.1 SUSE OpenStack Cloud Crowbar 9:mysql-connector-java-8.0.25-5.13.1 moderate 7.9 AV:N/AC:M/Au:S/C:C/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221142-1/ https://www.suse.com/security/cve/CVE-2021-2471.html CVE-2021-2471 https://bugzilla.suse.com/1195557 SUSE Bug 1195557