Skip to content
OpenAdvisories
Medium ELSA-2023-2378 1 CVE

Moderate: postgresql-jdbc security update (Oracle Linux 9)

Published May 15, 2023 · Updated May 15, 2023

Ecosystem: Oracle Linux

Summary

[42.2.27-1]
- rebase to 42.2.27
- fix for CVE-2022-41946

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 postgresql-jdbc 0:42.2.27-1.el9

Vulnerabilities 1

  • Medium 4.7
    CVE-2022-41946

    TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc

    pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStatement.setText(int, InputStream)` or `PreparedStatemet.setBytea(int, InputStream)` will create a temporary file if the InputStream is larger th…

    pgjdbc pgjdbc libpgjava libpgjava Debian Ubuntu Alpine Maven