Skip to content
OpenAdvisories
High ALAS2-2020-1482 1 CVE

Important: postgresql-jdbc security update (Amazon Linux 2)

Published Sep 1, 2020 · Updated Sep 2, 2020

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-13692: PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE. 1852985: CVE-2020-13692 postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 postgresql-jdbc 0:9.2.1002-8.amzn2
Amazon Linux · 2 postgresql-jdbc-javadoc 0:9.2.1002-8.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-13692.html