RHSA-2024:1435: Important: postgresql-jdbc security update
Important: postgresql-jdbc security update
Other sources
PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.Security Fix(es): PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE (CVE-2024-1597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1435?
The severity of RHSA-2024:1435 is classified as important.
How do I fix RHSA-2024:1435?
To fix RHSA-2024:1435, update the postgresql-jdbc package to version 42.2.14-3.el8_9.
Which software does RHSA-2024:1435 affect?
RHSA-2024:1435 affects multiple versions of Red Hat Enterprise Linux including x86_64, ARM 64, IBM z Systems, and Power architectures.
What does the postgresql-jdbc package do in RHSA-2024:1435?
The postgresql-jdbc package provides the .jar files needed for Java programs to connect to a PostgreSQL database.
Is there a specific version of postgresql-jdbc to implement for RHSA-2024:1435?
Yes, the specific version to implement for RHSA-2024:1435 is 42.2.14-3.el8_9.