MGASA-2020-0345

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2020-0345.html
Import Source
https://advisories.mageia.org/MGASA-2020-0345.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2020-0345
Upstream
  • CVE-2019-2435
Published
2020-08-25T08:13:25Z
Modified
2026-04-16T04:44:19Z
Summary
Updated mysql-connector-python packages fix security vulnerability
Details

Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Connectors accessible data as well as unauthorized access to critical data or complete access to all MySQL Connectors accessible data (CVE-2019-2435).

Also, the protobuf package was updated to add a python3 subpackage, which was needed for this update.

References
Credits

Affected packages

Mageia:7 / protobuf

Package

Name
protobuf
Purl
pkg:rpm/mageia/protobuf?arch=source&distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.6.1-1.1.mga7

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2020-0345.json"

Mageia:7 / mysql-connector-python

Package

Name
mysql-connector-python
Purl
pkg:rpm/mageia/mysql-connector-python?arch=source&distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.0.20-1.mga7

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2020-0345.json"