High ELSA-2020-3176 1 CVE

Important: postgresql-jdbc security update (Oracle Linux 8)

Published Jul 29, 2020 · Updated Jul 29, 2020

Ecosystem: Oracle Linux

Summary

[42.2.3-3]
- fixed XXE vulnerability unit test

[42.2.3-2]
- fixed XXE vulnerability (CVE-2020-13692)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	postgresql-jdbc	0:42.2.3-3.el8_2
Oracle Linux · 8	postgresql-jdbc-javadoc	0:42.2.3-3.el8_2

Vulnerabilities 1

High 7.7

CVE-2020-13692

Improper Restriction of XML External Entity Reference

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

libpgjava libpgjava org.postgresql:postgresql mariadb-11.2 Debian Ubuntu Alpine Wolfi Maven

Jun 4, 2020