USN-5238-1 — libpgjava vulnerability

Summary

It was discovered that PostgreSQL JDBC Driver incorrectly handled certain
requests from external entities. A remote attacker could use this vulnerability
to cause a denial of service or possibly execute arbitrary code.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	libpgjava	9.4.1212-1ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS	libpgjava	42.2.10-1ubuntu0.1~esm1

Vulnerabilities 1

High 7.7

CVE-2020-13692

Improper Restriction of XML External Entity Reference

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

libpgjava libpgjava org.postgresql:postgresql mariadb-11.2 Debian Ubuntu Alpine Wolfi Maven

Jun 4, 2020

References

report
https://ubuntu.com/security/CVE-2020-13692

libpgjava vulnerability

Summary

Fixed packages 2

Vulnerabilities 1

Improper Restriction of XML External Entity Reference

References