RHSA-2024:1649: Important: postgresql-jdbc: security update
Important: postgresql-jdbc: security update
Other sources
PostgreSQL is an advanced object-relational database management system. Thepostgresql-jdbc package includes the .jar files needed for Java programs toaccess a PostgreSQL database.Security Fix(es): pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE (CVE-2024-1597) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1649?
The severity of RHSA-2024:1649 is classified as important.
How do I fix RHSA-2024:1649?
To fix RHSA-2024:1649, update the postgresql-jdbc package to version 42.2.28-1.el9_2.
Which packages are affected by RHSA-2024:1649?
The affected packages for RHSA-2024:1649 include postgresql-jdbc version prior to 42.2.28-1.el9_2.
What products are impacted by RHSA-2024:1649?
RHSA-2024:1649 impacts several Red Hat Enterprise Linux products including server versions for various architectures.
When was RHSA-2024:1649 released?
RHSA-2024:1649 was released to address a security vulnerability related to the postgresql-jdbc package.