Skip to content
OpenAdvisories
Medium ELSA-2023-0318 1 CVE

Moderate: postgresql-jdbc security update (Oracle Linux 9)

Published Jan 24, 2023 · Updated Jan 24, 2023

Ecosystem: Oracle Linux

Summary

[42.2.18-6]
- fix for CVE-2022-31197

* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com>
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 postgresql-jdbc 0:42.2.18-6.el9_1

Vulnerabilities 1

  • High 7.1
    CVE-2022-31197

    SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc

    PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the `java.sql.ResultRow.refreshRow()` method is not performing escaping of column n…

    pgjdbc pgjdbc libpgjava libpgjava Debian Ubuntu Alpine Wolfi Maven