Confluence removes MySQL connector library during update process

Written by Claudio Kuenzler - 0 comments

Published on December 13th 2023 - Listed in Atlassian Linux MySQL

---

Another bunch of critical security vulnerabilities in Atlassian products were reported last week. This also includes a highly critical vulnerability CVE-2023-22522 in Atlassian Confluence, with a CVE Score of 8.8 (high). Atlassian gave the CVE a score of 9.0 (critical).

Confluence had problems starting up

But after patching Confluence (using the bin file update process), we were surprised to see the following error when we tried to start Confluence:

The same error also shows up in the logs:

Unable to bootstrap application: The database driver (com.mysql.jdbc.Driver) was not found in the class path.<br/>This Confluence installation cannot be upgraded automatically. Please see Confluence documentation:<br/>https://confluence.atlassian.com/display/DOC/Database+Setup+For+MySQL

MySQL connector library removed

By looking at the output of the update process we were surprised to see that the update script removed the MySQL connector library:

List of modifications made within Confluence directories.

The following provides a list of file modifications within the confluence
directory.

Modified files:
        bin/setenv.sh
Removed files:
        (none)
Added files:
        confluence/WEB-INF/classes/log4j-diagnostic.properties
        lib/mysql-connector-j-8.2.0.jar

The mysql-connector library was added months ago, to use MySQL 8.0 as database server.

While the Confluence update process ran, the jar library got removed from /opt/atlassian/confluence/lib/.

After copying mysql-connector-j-8.2.0.jar back into /opt/atlassian/confluence/lib/ (that's the default path, might depend on your installation), Confluence could be started successfully again.

Add a comment

Show form to leave a comment

Comments (newest first)

No comments yet.