[mysql-connector-java] 01/05: Update changelog. Release 5.1.39-1~deb8u1

Markus Koschany apo at moszumanska.debian.org
Wed Jun 22 15:37:45 UTC 2016


This is an automated email from the git hooks/post-receive script.

apo pushed a commit to branch jessie-security
in repository mysql-connector-java.

commit c354c4e82146c6bc1500928377648a15bdfa14e6
Author: Markus Koschany <apo at debian.org>
Date:   Tue Jun 21 21:52:17 2016 +0200

    Update changelog. Release 5.1.39-1~deb8u1
---
 debian/changelog | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 30b0a3f..ef4034b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,17 @@
+mysql-connector-java (5.1.39-1~deb8u1) jessie-security; urgency=medium
+
+  * Team upload.
+  * Fix CVE-2015-2575 by backporting the latest stable release.
+    Vulnerability in the MySQL Connectors component of Oracle MySQL
+    (subcomponent: Connector/J). Supported versions that are affected are
+    5.1.34 and earlier. Difficult to exploit vulnerability allows successful
+    authenticated network attacks via multiple protocols. Successful attack of
+    this vulnerability can result in unauthorized update, insert or delete
+    access to some MySQL Connectors accessible data as well as read access to a
+    subset of MySQL Connectors accessible data.
+
+ -- Markus Koschany <apo at debian.org>  Tue, 21 Jun 2016 21:48:42 +0200
+
 mysql-connector-java (5.1.39-1) unstable; urgency=medium
 
   * Team upload.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/mysql-connector-java.git



More information about the pkg-java-commits mailing list