SUSE-SU-2024:0773-1: Security update for postgresql-jdbc
Published Mar 5, 2024
·Updated
This update for postgresql-jdbc fixes the following issues: CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644).
Affected Software
22 affected componentsFixes available
All of the following
SUSE openSUSE Leap 15.4 (noarch)
Any of the following
suse/postgresql-jdbc-javadoc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
suse/postgresql-jdbc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
All of the following
SUSE openSUSE Leap 15.5 (noarch)
Any of the following
suse/postgresql-jdbc-javadoc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
suse/postgresql-jdbc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
All of the following
SUSE Server Applications Module 15-SP5 (noarch)
suse/postgresql-jdbc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
All of the following
SUSE SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch)
suse/postgresql-jdbc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
All of the following
SUSE SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch)
suse/postgresql-jdbc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
All of the following
SUSE SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch)
suse/postgresql-jdbc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch)
suse/postgresql-jdbc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
All of the following
SUSE SUSE Manager Proxy 4.3 (noarch)
suse/postgresql-jdbc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
All of the following
SUSE SUSE Manager Retail Branch Server 4.3 (noarch)
suse/postgresql-jdbc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
All of the following
SUSE SUSE Manager Server 4.3 (noarch)
suse/postgresql-jdbc<42.2.25-150400.3.12.1
42.2.25-150400.3.12.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/postgresql-jdbc-javadocto a version that resolves this vulnerability.Fixed in 42.2.25-150400.3.12.1 - Upgrade
Upgrade
suse/postgresql-jdbcto a version that resolves this vulnerability.Fixed in 42.2.25-150400.3.12.1 - Upgrade
Upgrade
postgresql-jdbcto a version that resolves this vulnerability.Patch SUSE-2024-773=1
Event History
Mar 5, 2024
Advisory Published
via SUSE·08:30 PM