Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities (CVE-2016-3506, CVE-2020-13692)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2016-3506 DESCRIPTION: An unspecified vulnerability in multiple Oracle products could allow an unauthenticated attacker to take...

Amazon Linux AMI : postgresql-jdbc (ALAS-2021-1533)

The version of postgresql-jdbc installed on the remote host is prior to 8.4.704-4.13. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1533 advisory. A flaw was found in PostgreSQL JDBC in versions prior to 42.2.13. An XML External Entity XXE weakness was found in...

Important: postgresql-jdbc

Issue Overview: A flaw was found in PostgreSQL JDBC in versions prior to 42.2.13. An XML External Entity XXE weakness was found in PostgreSQL JDBC. The highest threat from this vulnerability is to data confidentiality and system availability. CVE-2020-13692 Affected Packages: postgresql-jdbc Issu...

SUSE: Security Advisory (SUSE-SU-2021:0599-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NewStart CGSL CORE 5.04 / MAIN 5.04 : postgresql-jdbc Vulnerability (NS-SA-2021-0010)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has postgresql-jdbc packages installed that are affected by a vulnerability: - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. CVE-2020-13692 Note that Nessus has not tested for this issue but has instead relied on...

NewStart CGSL MAIN 6.02 : postgresql-jdbc Vulnerability (NS-SA-2021-0087)

The remote NewStart CGSL host, running version MAIN 6.02, has postgresql-jdbc packages installed that are affected by a vulnerability: - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. CVE-2020-13692 Note that Nessus has not tested for this issue but has instead relied only on the...

SUSE-SU-2021:0599-1 Security update for postgresql-jdbc

This update for postgresql-jdbc fixes the following issues: - CVE-2020-13692: Fixed a XML External Entity vulnerability bsc1172746...

Huawei EulerOS: Security Advisory for postgresql-jdbc (EulerOS-SA-2021-1349)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : postgresql-jdbc (EulerOS-SA-2021-1349)

According to the version of the postgresql-jdbc package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE.CVE-2020-13692 Note that Tenable Network Security has extracted the preceding...

Huawei EulerOS: Security Advisory for postgresql-jdbc (EulerOS-SA-2021-1165)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : postgresql-jdbc (EulerOS-SA-2021-1113)

According to the version of the postgresql-jdbc package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE.CVE-2020-13692 Note that Tenable Network Security has extracted the preceding...

Huawei EulerOS: Security Advisory for postgresql-jdbc (EulerOS-SA-2021-1113)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: Red Hat Integration Tech-Preview 2 Camel K security update

An update to the Camel K operator image for Red Hat Integration tech-preview is now available. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

SUSE-SU-2020:3466-1 Security update for SUSE Manager Server 4.0

This update fixes the following issues: bind-formula: - Temporarily disable dnssec-validation as hotfix for bsc1177790 - Update to version 0.1.1603299886.60e4bcf grafana-formula: - Use variable for product name - Add support for system groups in Client Systems dashboard postgresql-jdbc: - Address...

Security Bulletin: Security vulnerabilities have been fixed in the IBM Security Access Manager and IBM Security Verify Access products

Summary Fixes for security vulnerabilities identified in IBM Security Access Manager and IBM Security Verify Access are available. Vulnerability Details CVEID: CVE-2020-11868 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a flaw in ntpd. By sending a server mode packet with a...

Amazon Linux 2 : postgresql-jdbc (ALAS-2020-1482)

The version of postgresql-jdbc installed on the remote host is prior to 9.2.1002-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1482 advisory. PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. A flaw was found in PostgreSQL JDBC in versions prior to...

MGASA-2020-0319 Updated postgresql-jdbc packages fix security vulnerability

XML external entity XXE vulnerability in PgSQLXML CVE-2020-13692...

Oracle Linux 6 : postgresql-jdbc (ELSA-2020-3284)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-3284 advisory. 8.4.704-4 - require explicitly jdk-1.6 due to ABI bytecode compatibility 8.4.704-3 - fixed XXE vulnerability CVE-2020-13692 Tenable has extracted the preceding...

CentOS: Security Advisory for postgresql-jdbc (CESA-2020:3285)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for postgresql-jdbc (CESA-2020:3284)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...