|Category:||CentOS Local Security Checks|
|Title:||CentOS: Security Advisory for postgresql-jdbc (CESA-2020:3284)|
|Summary:||The remote host is missing an update for the 'postgresql-jdbc'; package(s) announced via the CESA-2020:3284 advisory.|
The remote host is missing an update for the 'postgresql-jdbc'
package(s) announced via the CESA-2020:3284 advisory.
PostgreSQL is an advanced object-relational database management system. The
postgresql-jdbc package includes the .jar files needed for Java programs to
access a PostgreSQL database.
* postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML
This update introduces a backwards incompatible change required to resolve
this issue. Refer to the Red Hat Knowledgebase article 5266441 linked to in
the References section for information on how to re-enable the old insecure
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
'postgresql-jdbc' package(s) on CentOS 6.
Please install the updated package(s).
Common Vulnerability Exposure (CVE) ID: CVE-2020-13692|
|Copyright||Copyright (C) 2020 Greenbone Networks GmbH|
|This is only one of 85075 vulnerability tests in our test suite. Find out more about running a complete security audit.|
To run a free test of this vulnerability against your system, register below.