CVE catalog

CVE-2023-21971

Security update for mysql-connector-java

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.48% · Oct 25, 2026

These are all security issues fixed in the mysql-connector-java-8.0.33-2.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensusemysql-connector-javatumbleweed8.0.33-2.1fixed
Opensusemysql-connector-javaleap 15.48.0.33-150200.3.18.1fixed
Opensusemysql-connector-javaleap 15.58.0.33-150200.3.18.1fixed
Ubuntumysql-connector-java14.045.1.25-1vulnerable
Ubuntumysql-connector-java14.045.1.26-1vulnerable
Ubuntumysql-connector-java14.045.1.27-1vulnerable
Ubuntumysql-connector-java14.045.1.28-1vulnerable
Ubuntumysql-connector-java16.045.1.32-1vulnerable
Ubuntumysql-connector-java16.045.1.38-1vulnerable
Ubuntumysql-connector-java18.045.1.42-1vulnerable
Ubuntumysql-connector-java18.045.1.44-1vulnerable
Ubuntumysql-connector-java18.045.1.45-1vulnerable
Opensusemysql-connector-javaleap 15.48.0.32-150200.3.15.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensusemysql-connector-javarpmtumbleweed8.0.33-2.1Not reportedOPENSUSE-SU-2024:12927-1Not reported
Opensusemysql-connector-javarpmleap 15.48.0.33-150200.3.18.1Not reportedSUSE-SU-2023:2979-1Not reported
Opensusemysql-connector-javarpmleap 15.58.0.33-150200.3.18.1Not reportedSUSE-SU-2023:2979-1Not reported
Opensusemysql-connector-javarpmleap 15.48.0.32-150200.3.15.1Not reportedSUSE-SU-2023:2241-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]