Oracle MySQL Connectors (October 2024 CPU)

[Jarod Burris]

Hi all,
We have another round of CVEs that are being flagged against the 32-bit driver. The publication (https://www.oracle.com/security-alerts/cpuoct2024.html) only lists the 64-bit driver ("9.0.0 and prior") in the ("Supported Versions Affected") column.

If you could please confirm the 32-bit ODBC driver version that remediates these CVEs so we have the artifact necessary to remediate.

CVE-2023-45853

CVE-2024-5535

CVE-2024-6119

CVE-2024-21262

CVE-2024-21272

.... as an aside if there is a mechanism for the initial publication to include the 32-bit driver version as well it would alleviate the need for this type of request which I can see is becoming more frequent.

Thank you for your attention on this