Skip to content
OpenAdvisories
Medium ELSA-2023-2867 1 CVE

Moderate: postgresql-jdbc security update (Oracle Linux 8)

Published May 24, 2023 · Updated May 24, 2023

Ecosystem: Oracle Linux

Summary

[42.2.14-2]
- Fix CVE-2022-41946

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 postgresql-jdbc 0:42.2.14-2.el8
Oracle Linux · 8 postgresql-jdbc-javadoc 0:42.2.14-2.el8

Vulnerabilities 1

  • Medium 4.7
    CVE-2022-41946

    TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc

    pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStatement.setText(int, InputStream)` or `PreparedStatemet.setBytea(int, InputStream)` will create a temporary file if the InputStream is larger th…

    pgjdbc pgjdbc libpgjava libpgjava Debian Ubuntu Alpine Maven