Description
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 8 | mysql-connector-java | 5.1.39-1~deb8u1 | DSA-3621-1 |
| Debian 7 | mysql-connector-java | 5.1.39-1~deb7u1 | DLA-526-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | mysql-connector-java | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | mysql-connector-java | 5.1.35-3.1 | SUSE-SU-2016:2259-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | mysql-connector-java | 5.1.35-2.3 | openSUSE-SU-2024:10286-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | mysql:mysql-connector-java | < 5.1.35 | 5.1.35 | GHSA-gc43-g62c-99g2 |
Advisories 6
- DSA-3621-1 mysql-connector-java - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-526-1 mysql-connector-java - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2016:2259-1 Security update for mysql-connector-java SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10286-1 mysql-connector-java-5.1.35-2.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2022-1375 JFrog Artifactory: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2025
- WID-SEC-2023-2068 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 15, 2023
References
- openSUSE-SU-2015:0967 vendor-advisory
- https://security.netapp.com/advisory/ntap-20150417-0003/
- DSA-3621 vendor-advisory
- 74075 vdb-entry
- 1032121 vdb-entry
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
- SUSE-SU-2015:0946 vendor-advisory