CVE-2020-2875

NameCVE-2020-2875
DescriptionVulnerability in the MySQL Connectors product of Oracle MySQL (compone ...
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
ReferencesDLA-2245-1, DSA-4703-1, ELA-234-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
mysql-connector-java (PTS)jessie, jessie (lts)5.1.49-0+deb8u1fixed
stretch, stretch (security)5.1.49-0+deb9u1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
mysql-connector-javasource(unstable)(unfixed)
mysql-connector-javasourcejessie5.1.49-0+deb8u1DLA-2245-1
mysql-connector-javasourcestretch5.1.49-0+deb9u1DSA-4703-1
mysql-connector-javasourcewheezy5.1.49-0+deb7u1ELA-234-1

Notes

https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL

Search for package or bug name: Reporting problems