Most recent entries from all

ALSA-2020:3176 — Important: postgresql-jdbc security update

Affected: AlmaLinux:8: postgresql-jdbc, AlmaLinux:8: postgresql-jdbc-javadoc

PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.

Security Fix(es):

* postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692)

This update introduces a backwards incompatible change required to resolve this issue. Refer to the AlmaLinux Knowledgebase article 5266441 linked to in the References section for information on how to re-enable the old insecure behavior.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2022-03872

certfr-2020-avi-342 — Une vulnérabilité a été découverte dans PostgreSQL. Elle permet à un attaquant de provoquer un problème de sécurité non…

certfr-2020-avi-342

cnvd-2020-35974

EUVD-2026-41948

fkie_cve-2020-13692

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

GHSA-88cc-g835-76rp — Improper Restriction of XML External Entity Reference

Affected: Maven: org.postgresql:postgresql

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

gsd-2020-13692

RHSA-2020:3005 — Red Hat Security Advisory: Red Hat Integration Debezium 1.1.3 security update

postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML

RHSA-2020:3176 — Red Hat Security Advisory: postgresql-jdbc security update

postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML

SUSE-SU-2020:3466-1 — Security update for SUSE Manager Server 4.0

Security update for SUSE Manager Server 4.0

UBUNTU-CVE-2020-13692

Affected: Ubuntu:Pro:18.04:LTS: libpgjava, Ubuntu:Pro:20.04:LTS: libpgjava

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.