Summary
[42.2.28-1]
- rebase to 42.2.28
- fix for CVE-2024-1597
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | postgresql-jdbc | 0:42.2.28-1.el9_3 |
Vulnerabilities 1
-
Critical 10.0
pgjdbc SQL Injection via line comment generation
pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There mu…