Skip to content
OpenAdvisories
High ELSA-2024-1435 1 CVE

Important: postgresql-jdbc security update (Oracle Linux 8)

Published Mar 20, 2024 · Updated Mar 20, 2024

Ecosystem: Oracle Linux

Summary

[42.2.14-3]
- Fix CVE-2024-1597

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 postgresql-jdbc 0:42.2.14-3.el8_9
Oracle Linux · 8 postgresql-jdbc-javadoc 0:42.2.14-3.el8_9

Vulnerabilities 1

  • Critical 10.0
    CVE-2024-1597

    pgjdbc SQL Injection via line comment generation

    pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There mu…

    pgjdbc pgjdbc trino trino-plugin-opensearch Debian Ubuntu Alpine Wolfi Maven