Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
219
security advisorysecurity issueSQL injectionRocky Linux 8 RLSA-2024:1435 important: SQL injection in PostgreSQL JDBC
Important: postgresql-jdbc security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2024:1435", "synopsis": "Important: postgresql-jdbc security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for postgresql-jdbc.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.\n\nSecurity Fix(es):\n\n* PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE (CVE-2024-1597)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2266523", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2266523", "description": ""}], "cves": [{"name": "CVE-2024-1597", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2024-1597", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2024-03-27T04:34:32.999941Z", "rpms": {"Rocky Linux 8": {"nvras": ["postgresql-jdbc-0:42.2.14-3.el8_9.noarch.rpm", "postgresql-jdbc-0:42.2.14-3.el8_9.src.rpm", "postgresql-jdbc-javadoc-0:42.2.14-3.el8_9.noarch.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Uncover the critical security patch for PostgreSQL JDBC pertaining to Rocky Linux 8 and examine its implications for vulnerabilities associated with SQL injection.. PostgreSQL JDBC Update, Rocky Linux Security, SQL Injection Threats, JDBC Driver Vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Mar 27, 2024
•Important
Rocky Linux
89
security advisorysecurity issuecriticalFedora 35: 2022-1151f65e9a Critical: Postgresql JDBC Security Update
Rebase on upstream version 42.2.25. This rebase fixes CVE-2022-21724.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-1151f65e9a 2022-04-14 16:06:11.136474 --------------------------------------------------------------------------------Name : postgresql-jdbc Product : Fedora 35 Version : 42.2.25 Release : 1.fc35 URL : https://jdbc.postgresql.org/ Summary : JDBC driver for PostgreSQL Description : PostgreSQL is an advanced Object-Relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. --------------------------------------------------------------------------------Update Information: Rebase on upstream version 42.2.25. This rebase fixes CVE-2022-21724. --------------------------------------------------------------------------------ChangeLog: * Wed Apr 6 2022 Zuzana Miklankova - 42.2.25-1 - rebase to version 42.2.25 --------------------------------------------------------------------------------References: [ 1 ] Bug #2050863 - CVE-2022-21724 jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes https://bugzilla.redhat.com/show_bug.cgi?id=2050863 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-1151f65e9a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 14, 2022
•Critical
Fedora
87
security advisorysecurity updatecriticalDebian: DSA-4703-1 Critical Fix for mysql-connector-java JDBC Issues
Three vulnerabilities have been found in the MySQL Connector/J JDBC driver. For the oldstable distribution (stretch), these problems have been fixed . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4703-1
Jun 11, 2020
•Critical
Debian
89
security advisoryupdateFedoraFedora 28 Security Advisory: PostgreSQL JDBC Update for CVE-2018-10936
new upstream version, to fix CVE-2018-10936. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-1b9e80874d 2019-03-12 21:43:59.599270 --------------------------------------------------------------------------------Name : postgresql-jdbc Product : Fedora 28 Version : 42.2.5 Release : 2.fc28 URL : https://jdbc.postgresql.org/ Summary : JDBC driver for PostgreSQL Description : PostgreSQL is an advanced Object-Relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database. --------------------------------------------------------------------------------Update Information: new upstream version, to fix CVE-2018-10936 --------------------------------------------------------------------------------ChangeLog: * Sat Feb 2 2019 Fedora Release Engineering - 42.2.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Nov 21 2018 Pavel Raiskup - 42.2.5-1 - new upstream release * Fri Aug 3 2018 Pavel Raiskup - 42.2.4-1 - new upstream release (rhbz#1601193) * Fri Jul 13 2018 Pavel Raiskup - 42.2.3-1 - new upstream release (rhbz#1600759) * Wed May 30 2018 Mikolaj Izdebski - 42.2.2-4 - Remove and obsolete parent-poms subpackage * Fri Apr 20 2018 Pavel Raiskup - 42.2.2-3 - provide postgresql.jar, as that's the upstream's artifactId * Fri Apr 13 2018 Pavel Raiskup - 42.2.2-2 - BR postgresql-test-rpm-macros * Fri Mar 16 2018 Pavel Raiskup - 42.2.2-1 - new upstream release --------------------------------------------------------------------------------References: [ 1 ] Bug #1601193 - postgresql-jdbc-42.2.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1601193 [ 2 ] Bug #1664337 - CVE-2018-10936 postgresql-jdbc: PostgreSQL: Postgres JDBC driver does not perform host name validation by default [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1664337 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-1b9e80874d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 12, 2019
•Important
Fedora
87
security advisorysoftware updatedebianDebian Jessie: DSA-3857-1 Critical: MySQL Connector/J Security Threat
Two vulnerabilities have been found in the MySQL Connector/J JDBC driver. For the stable distribution (jessie), these problems have been fixed in version 5.1.42-1~deb8u1. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3857-1
May 18, 2017
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!