Accepted mysql-connector-java 5.1.39-1~deb8u1 (source all) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 06 Jul 2016 22:31:55 +0200
Source: mysql-connector-java
Binary: libmysql-java
Architecture: source all
Version: 5.1.39-1~deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libmysql-java - Java database (JDBC) driver for MySQL
Changes:
mysql-connector-java (5.1.39-1~deb8u1) jessie-security; urgency=high
.
* Team upload.
* Fix CVE-2015-2575 by backporting the latest stable release.
Vulnerability in the MySQL Connectors component of Oracle MySQL
(subcomponent: Connector/J). Supported versions that are affected are
5.1.34 and earlier. Difficult to exploit vulnerability allows successful
authenticated network attacks via multiple protocols. Successful attack of
this vulnerability can result in unauthorized update, insert or delete
access to some MySQL Connectors accessible data as well as read access to a
subset of MySQL Connectors accessible data.
* Relax build-dependency on default-jdk to >= 1.7.
* Do not build the JDBC 4+ implementation which requires Java 8 and disable
JDBC42 invocations.
Checksums-Sha1:
5caad975365cefa2af87ac34ff5bb7f28d419f07 2355 mysql-connector-java_5.1.39-1~deb8u1.dsc
763ad60c836569fd6dc1e55346dd53690fc50ef8 979308 mysql-connector-java_5.1.39.orig.tar.xz
4c0462a03fef27e8d5d1df86cdbbb26d0f986235 11692 mysql-connector-java_5.1.39-1~deb8u1.debian.tar.xz
9138820b2bbf78a8bfd3850761784bfca2a50cf5 1028366 libmysql-java_5.1.39-1~deb8u1_all.deb
Checksums-Sha256:
e4da6a322eb61235548dbe84157c00a4153d66f1e9fb8f136b01220bb70cfce0 2355 mysql-connector-java_5.1.39-1~deb8u1.dsc
53a661327b212840adce981136ad1adefd2431d83f807c0f895c28a45a576953 979308 mysql-connector-java_5.1.39.orig.tar.xz
6d82b795d6e45f5030cce6bc7be9d33c25f4ba536f46a4b4c3235d74e44eaaea 11692 mysql-connector-java_5.1.39-1~deb8u1.debian.tar.xz
8d830fd7c3cb7d787bf5118f5172a1e3e57d58a24ed562d43e4ad79bf891a742 1028366 libmysql-java_5.1.39-1~deb8u1_all.deb
Files:
b2f6b8a68fa531caacb2a1d82ef95948 2355 java optional mysql-connector-java_5.1.39-1~deb8u1.dsc
3f11f448cfa4075682814913925b39c8 979308 java optional mysql-connector-java_5.1.39.orig.tar.xz
c78d30bb4afad4eaaa5de41aca8f8c37 11692 java optional mysql-connector-java_5.1.39-1~deb8u1.debian.tar.xz
22e50ff2cdd4079c6deeb63dbbdbca5e 1028366 java optional libmysql-java_5.1.39-1~deb8u1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=E4PS
-----END PGP SIGNATURE-----