SUSE-SU-2016:2259-1: moderate: Security update for mysql-connector-java

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for mysql-connector-java
______________________________________________________________________________

Announcement ID:    SUSE-SU-2016:2259-1
Rating:             moderate
References:         #927981 
Cross-References:   CVE-2015-2575
Affected Products:
                    SUSE Linux Enterprise Software Development Kit 12-SP1
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:


   mysql-connector-java was updated to 5.1.35, fixing multiple bugs and a
   security issues.

   - CVE-2015-2575: Unspecified vulnerability in the MySQL Connectors
     component in Oracle MySQL 5.1.34 and earlier allows remote authenticated
     users to affect confidentiality and integrity via unknown vectors
     related to Connector/J. (bnc#927981)

   Please see http://dev.mysql.com/doc/relnotes/connector-j/en/news-5-1.html


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Software Development Kit 12-SP1:

      zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-1322=1

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Software Development Kit 12-SP1 (noarch):

      mysql-connector-java-5.1.35-3.1


References:

   https://www.suse.com/security/cve/CVE-2015-2575.html
   https://bugzilla.suse.com/927981