[Bug 1444407] New: CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
4:55 a.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Bug ID: 1444407
Summary: CVE-2017-3589 mysql-connector-java: Connector/J
unspecified vulnerability (CPU Apr 2017)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: abhgupta(a)redhat.com, aileenc(a)redhat.com,
avibelli(a)redhat.com, chazlett(a)redhat.com,
coneill(a)redhat.com, databases-maint(a)redhat.com,
gsterlin(a)redhat.com, gvarsami(a)redhat.com,
hhorak(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jbalunas(a)redhat.com, jcoleman(a)redhat.com,
jshepherd(a)redhat.com, kconner(a)redhat.com,
kseifried(a)redhat.com, ldimaggi(a)redhat.com,
mmuzila(a)redhat.com, mschorm(a)redhat.com,
nwallace(a)redhat.com, puntogil(a)libero.it,
rrajasek(a)redhat.com, rwagner(a)redhat.com,
tcunning(a)redhat.com, tiwillia(a)redhat.com,
tjay(a)redhat.com, tkirby(a)redhat.com, xjakub(a)fi.muni.cz
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent:
Connector/J). Supported versions that are affected are 5.1.41 and earlier.
Easily exploitable vulnerability allows low privileged attacker with logon to
the infrastructure where MySQL Connectors executes to compromise MySQL
Connectors. Successful attacks of this vulnerability can result in unauthorized
update, insert or delete access to some of MySQL Connectors accessible data.
External References:
http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.ht...
--
You are receiving this mail because:
You are on the CC list for the bug.
5:03 a.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Adam Mariš <amaris(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1444415
Depends On| |1444418
--- Comment #1 from Adam Mariš <amaris(a)redhat.com> ---
Created mysql-connector-java tracking bugs for this issue:
Affects: fedora-all [bug 1444418]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1444418
[Bug 1444418] CVE-2017-3586 CVE-2017-3589 mysql-connector-java: various
flaws [fedora-all]
--
You are receiving this mail because:
You are on the CC list for the bug.
2:24 a.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Apurbita Mukherjee <apmukher(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |apmukher(a)redhat.com
--
You are receiving this mail because:
You are on the CC list for the bug.
5:12 p.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Yasuhiro Ozone <yozone(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |yozone(a)redhat.com
--
You are receiving this mail because:
You are on the CC list for the bug.
8:03 a.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Stefan Cornelius <scorneli(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20170419, |impact=low,public=20170419,
|reported=20170419,source=in |reported=20170419,source=in
|ternet,cvss3=3.3/CVSS:3.0/A |ternet,cvss3=3.3/CVSS:3.0/A
|V:L/AC:L/PR:L/UI:N/S:U/C:N/ |V:L/AC:L/PR:L/UI:N/S:U/C:N/
|I:L/A:N,rhel-6/mysql-connec |I:L/A:N,rhel-6/mysql-connec
|tor-java=affected,rhel-7/my |tor-java=wontfix,rhel-7/mys
|sql-connector-java=affected |ql-connector-java=affected,
|,rhmap-4/mysql-connector-ja |rhmap-4/mysql-connector-jav
|va=affected,rhsso-7/mysql-c |a=affected,rhsso-7/mysql-co
|onnector-java=affected,open |nnector-java=affected,opens
|shift-enterprise-2/mysql-co |hift-enterprise-2/mysql-con
|nnector-java=affected,jpp-6 |nector-java=affected,jpp-6/
|/mysql-connector-java=affec |mysql-connector-java=affect
|ted,fsw-6/mysql-connector-j |ed,fsw-6/mysql-connector-ja
|ava=affected,fedora-all/mys |va=affected,fedora-all/mysq
|ql-connector-java=affected |l-connector-java=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
8:45 a.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Stefan Cornelius <scorneli(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1464467, 1464466
--
You are receiving this mail because:
You are on the CC list for the bug.
5:28 a.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Honza Horak <hhorak(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |amaris(a)redhat.com
Flags| |needinfo?(amaris(a)redhat.com
| |)
--
You are receiving this mail because:
You are on the CC list for the bug.
7:26 a.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Adam Mariš <amaris(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |scorneli(a)redhat.com
Flags|needinfo?(amaris(a)redhat.com |needinfo?(scorneli(a)redhat.c
|) |om)
--
You are receiving this mail because:
You are on the CC list for the bug.
3:50 a.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Stefan Cornelius <scorneli(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20170419, |impact=low,public=20170419,
|reported=20170419,source=in |reported=20170419,source=in
|ternet,cvss3=3.3/CVSS:3.0/A |ternet,cvss3=3.3/CVSS:3.0/A
|V:L/AC:L/PR:L/UI:N/S:U/C:N/ |V:L/AC:L/PR:L/UI:N/S:U/C:N/
|I:L/A:N,rhel-6/mysql-connec |I:L/A:N,rhel-6/mysql-connec
|tor-java=wontfix,rhel-7/mys |tor-java=wontfix,rhel-7/mys
|ql-connector-java=affected, |ql-connector-java=wontfix,r
|rhmap-4/mysql-connector-jav |hmap-4/mysql-connector-java
|a=affected,rhsso-7/mysql-co |=affected,rhsso-7/mysql-con
|nnector-java=affected,opens |nector-java=affected,opensh
|hift-enterprise-2/mysql-con |ift-enterprise-2/mysql-conn
|nector-java=affected,jpp-6/ |ector-java=affected,jpp-6/m
|mysql-connector-java=affect |ysql-connector-java=affecte
|ed,fsw-6/mysql-connector-ja |d,fsw-6/mysql-connector-jav
|va=affected,fedora-all/mysq |a=affected,fedora-all/mysql
|l-connector-java=affected |-connector-java=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
3:51 a.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
--- Comment #11 from Stefan Cornelius <scorneli(a)redhat.com> ---
Statement:
This issue affects the versions of mysql-connector-java as shipped with Red Hat
Enterprise Linux 6 and 7.
--
You are receiving this mail because:
You are on the CC list for the bug.
8:57 a.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Stefan Cornelius <scorneli(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Flags|needinfo?(scorneli(a)redhat.c |
|om) |
--
You are receiving this mail because:
You are on the CC list for the bug.
3:17 p.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20170419, |impact=low,public=20170419,
|reported=20170419,source=in |reported=20170419,source=in
|ternet,cvss3=3.3/CVSS:3.0/A |ternet,cvss3=3.3/CVSS:3.0/A
|V:L/AC:L/PR:L/UI:N/S:U/C:N/ |V:L/AC:L/PR:L/UI:N/S:U/C:N/
|I:L/A:N,rhel-6/mysql-connec |I:L/A:N,rhel-6/mysql-connec
|tor-java=wontfix,rhel-7/mys |tor-java=wontfix,rhel-7/mys
|ql-connector-java=wontfix,r |ql-connector-java=wontfix,r
|hmap-4/mysql-connector-java |hmap-4/mysql-connector-java
|=affected,rhsso-7/mysql-con |=affected,rhsso-7/mysql-con
|nector-java=affected,opensh |nector-java=affected,opensh
|ift-enterprise-2/mysql-conn |ift-enterprise-2/mysql-conn
|ector-java=affected,jpp-6/m |ector-java=affected,jpp-6/m
|ysql-connector-java=affecte |ysql-connector-java=wontfix
|d,fsw-6/mysql-connector-jav |,fsw-6/mysql-connector-java
|a=affected,fedora-all/mysql |=affected,fedora-all/mysql-
|-connector-java=affected |connector-java=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
2:59 p.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Pavel Polischouk <pavelp(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |pavelp(a)redhat.com
Whiteboard|impact=low,public=20170419, |impact=low,public=20170419,
|reported=20170419,source=in |reported=20170419,source=in
|ternet,cvss3=3.3/CVSS:3.0/A |ternet,cvss3=3.3/CVSS:3.0/A
|V:L/AC:L/PR:L/UI:N/S:U/C:N/ |V:L/AC:L/PR:L/UI:N/S:U/C:N/
|I:L/A:N,rhel-6/mysql-connec |I:L/A:N,rhel-6/mysql-connec
|tor-java=wontfix,rhel-7/mys |tor-java=wontfix,rhel-7/mys
|ql-connector-java=wontfix,r |ql-connector-java=wontfix,r
|hmap-4/mysql-connector-java |hmap-4/mysql-connector-java
|=affected,rhsso-7/mysql-con |=affected,rhsso-7/mysql-con
|nector-java=affected,opensh |nector-java=affected,opensh
|ift-enterprise-2/mysql-conn |ift-enterprise-2/mysql-conn
|ector-java=affected,jpp-6/m |ector-java=affected,jpp-6/m
|ysql-connector-java=wontfix |ysql-connector-java=wontfix
|,fsw-6/mysql-connector-java |,fsw-6/mysql-connector-java
|=affected,fedora-all/mysql- |=wontfix,fedora-all/mysql-c
|connector-java=affected |onnector-java=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
11:56 a.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Sanne Grinovero <sanne(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |sanne(a)redhat.com
--
You are receiving this mail because:
You are on the CC list for the bug.
2:26 p.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Carlo de Wolf <cdewolf(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |cdewolf(a)redhat.com
--
You are receiving this mail because:
You are on the CC list for the bug.
12:45 p.m.
New subject: [Bug 1444407] CVE-2017-3589 mysql-connector-java: Connector/ J unspecified vulnerability (CPU Apr 2017)
https://bugzilla.redhat.com/show_bug.cgi?id=1444407
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |drieden(a)redhat.com,
| |pdrozd(a)redhat.com,
| |sthorger(a)redhat.com
Whiteboard|impact=low,public=20170419, |impact=low,public=20170419,
|reported=20170419,source=in |reported=20170419,source=in
|ternet,cvss3=3.3/CVSS:3.0/A |ternet,cvss3=3.3/CVSS:3.0/A
|V:L/AC:L/PR:L/UI:N/S:U/C:N/ |V:L/AC:L/PR:L/UI:N/S:U/C:N/
|I:L/A:N,rhel-6/mysql-connec |I:L/A:N,rhel-6/mysql-connec
|tor-java=wontfix,rhel-7/mys |tor-java=wontfix,rhel-7/mys
|ql-connector-java=wontfix,r |ql-connector-java=wontfix,r
|hmap-4/mysql-connector-java |hmap-4/mysql-connector-java
|=affected,rhsso-7/mysql-con |=affected,rhsso-7/mysql-con
|nector-java=affected,opensh |nector-java=notaffected,ope
|ift-enterprise-2/mysql-conn |nshift-enterprise-2/mysql-c
|ector-java=affected,jpp-6/m |onnector-java=affected,jpp-
|ysql-connector-java=wontfix |6/mysql-connector-java=wont
|,fsw-6/mysql-connector-java |fix,fsw-6/mysql-connector-j
|=wontfix,fedora-all/mysql-c |ava=wontfix,fedora-all/mysq
|onnector-java=affected |l-connector-java=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
2197
days inactive
2580
days old
java-sig-commits@lists.fedoraproject.org
15 comments
1 participants
participants (1)
-
bugzilla＠redhat.com