<![CDATA[Oracle MySQL Patch Update Advisory]]>Rapid7 is reporting a vulnerability in the MySQL Connector (MySQL Connector/J) that is present in the NetXMS\lib\java\mysql-connector-java-8.0.28.jar file.  I installed NetXMS 4.2 and discovered that the 4.2 release still contains the 8.0.28 version of the MySQL components.  Can the MySQL Connector components be updated to v8.0.31 so that this vulnerability can be remediated? Oracle MySQL Risk Matrix for reference.

Thank you

]]>https://forum.netxms.org/topic/7563/oracle-mysql-patch-update-advisoryRSS for NodeFri, 13 Nov 2026 06:22:56 GMTWed, 16 Nov 2022 13:59:28 GMT60<![CDATA[Reply to Oracle MySQL Patch Update Advisory on Thu, 15 Dec 2022 19:08:00 GMT]]>Victor, this has been resolved.  Thank you!

]]>https://forum.netxms.org/post/32092https://forum.netxms.org/post/32092Thu, 15 Dec 2022 19:08:00 GMT<![CDATA[Reply to Oracle MySQL Patch Update Advisory on Mon, 21 Nov 2022 09:35:14 GMT]]>Just updated dependencies in development branch, next patch release will include 8.0.31. But this connector is only used by reporting server when your database is MySQL, so if you are not on MySQL or not using reporting server you are safe anyway.

Best regards,
Victor

]]>https://forum.netxms.org/post/32045https://forum.netxms.org/post/32045Mon, 21 Nov 2022 09:35:14 GMT