High ELSA-2020-3285 1 CVE

Important: postgresql-jdbc security update (Oracle Linux 7)

Published Aug 4, 2020 · Updated Aug 4, 2020

Ecosystem: Oracle Linux

Summary

[9.2.1002-8]
- require explicitly jdk-1.7 due to ABI bytecode compatibility

[9.2.1002-7]
- fixed XXE vulnerability (CVE-2020-13692)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	postgresql-jdbc	0:9.2.1002-8.el7_8
Oracle Linux · 7	postgresql-jdbc-javadoc	0:9.2.1002-8.el7_8

Vulnerabilities 1

High 7.7

CVE-2020-13692

Improper Restriction of XML External Entity Reference

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

libpgjava libpgjava org.postgresql:postgresql mariadb-11.2 Debian Ubuntu Alpine Wolfi Maven

Jun 4, 2020