CVE-2020-13692
Fixed in a distro release EPSS 4%
PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.
Products: postgresql_jdbc_driver, quarkus, netapp steelstore_cloud_integrated_storage, fedoraproject fedora, debian_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.postgresql:postgresql | 42.2.13 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | postgresql-jdbc | 42.2.3-3.el8_2 |
| AlmaLinux 8 | postgresql-jdbc-javadoc | 42.2.3-3.el8_2 |
| Amazon Linux 2 | postgresql-jdbc | 9.2.1002-8.amzn2 |
| Amazon Linux 2 | postgresql-jdbc-javadoc | 9.2.1002-8.amzn2 |
| Chainguard | mariadb-10.6-test | no fix |
| Chainguard | mariadb-11.2 | 11.2.3-r2 |
| Chainguard | mariadb-11.2-backup | 11.2.3-r2 |
| Chainguard | mariadb-11.2-bench | 11.2.3-r2 |
| Chainguard | mariadb-11.2-client | 11.2.3-r2 |
| Chainguard | mariadb-11.2-dev | 11.2.3-r2 |
| Chainguard | mariadb-11.2-doc | 11.2.3-r2 |
| Chainguard | mariadb-11.2-embedded | 11.2.3-r2 |
| Chainguard | mariadb-11.2-oci-entrypoint | 11.2.3-r2 |
| Debian 12 | libpgjava | 42.2.12-2 |
| Debian 13 | libpgjava | 42.2.12-2 |
| Debian 14 | libpgjava | 42.2.12-2 |
| Red Hat Enterprise Linux 6 | postgresql-jdbc | 0:8.4.704-4.el6_10 |
| Red Hat Enterprise Linux 7 | postgresql-jdbc | 0:9.2.1002-8.el7_8 |
| Red Hat Enterprise Linux 7 | postgresql-jdbc-javadoc | 0:9.2.1002-8.el7_8 |
| Red Hat Enterprise Linux 8 | postgresql-jdbc | 0:42.2.3-3.el8_2 |
| Red Hat Enterprise Linux 8 | postgresql-jdbc-javadoc | 0:42.2.3-3.el8_2 |
| Red Hat rhel e4s 8.0 | postgresql-jdbc | 0:42.2.3-3.el8_0 |
| Red Hat rhel e4s 8.0 | postgresql-jdbc-javadoc | 0:42.2.3-3.el8_0 |
| Red Hat rhel eus 8.1 | postgresql-jdbc | 0:42.2.3-3.el8_1 |
| Red Hat rhel eus 8.1 | postgresql-jdbc-javadoc | 0:42.2.3-3.el8_1 |
| Rocky Linux 8 | postgresql-jdbc | 0:42.2.3-3.el8_2 |
| SUSE Linux Enterprise Server 12 SP5 | postgresql-jdbc | 9.4-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | postgresql-jdbc | 9.4-3.3.1 |
| SUSE Manager Server Module 4.0 | bind-formula | 0.1.1603299886.60e4bcf-3.11.1 |
| SUSE Manager Server Module 4.0 | grafana-formula | 0.2.2-4.13.1 |
| SUSE Manager Server Module 4.0 | postgresql-jdbc | 42.2.10-3.3.1 |
| SUSE Manager Server Module 4.0 | prometheus-exporters-formula | 0.7.5-3.16.1 |
| SUSE Manager Server Module 4.0 | prometheus-formula | 0.2.3-4.16.1 |
| SUSE Manager Server Module 4.0 | salt-netapi-client | 0.18.0-4.12.1 |
| SUSE Manager Server Module 4.0 | spacewalk-admin | 4.0.12-3.15.1 |
| SUSE Manager Server Module 4.0 | spacewalk-backend | 4.0.35-3.38.1 |
| SUSE Manager Server Module 4.0 | spacewalk-java | 4.0.40-3.48.2 |
| SUSE Manager Server Module 4.0 | spacewalk-web | 4.0.25-3.36.1 |
| SUSE Manager Server Module 4.0 | susemanager | 4.0.32-3.46.1 |
| SUSE Manager Server Module 4.0 | susemanager-schema | 4.0.23-3.32.1 |
| SUSE Manager Server Module 4.0 | susemanager-sls | 4.0.31-3.37.1 |
| SUSE Manager Server Module 4.1 | image-sync-formula | 0.1.1605087464.65d1b51-3.9.5 |
| SUSE Manager Server Module 4.1 | mgr-libmod | 4.1.5-3.8.2 |
| SUSE Manager Server Module 4.1 | postgresql-jdbc | 42.2.10-3.3.5 |
| SUSE Manager Server Module 4.1 | python-susemanager-retail | 1.0.1605087464.65d1b51-3.6.5 |
| SUSE Manager Server Module 4.1 | saltboot-formula | 0.1.1605087464.65d1b51-3.9.5 |
| SUSE Manager Server Module 4.1 | spacecmd | 4.1.9-4.12.5 |
| SUSE Manager Server Module 4.1 | spacewalk-admin | 4.1.8-3.9.5 |
| SUSE Manager Server Module 4.1 | spacewalk-backend | 4.1.18-4.14.6 |
| SUSE Manager Server Module 4.1 | spacewalk-certs-tools | 4.1.14-3.9.5 |
| SUSE Manager Server Module 4.1 | spacewalk-client-tools | 4.1.8-4.9.5 |
| SUSE Manager Server Module 4.1 | spacewalk-java | 4.1.24-3.19.6 |
| SUSE Manager Server Module 4.1 | spacewalk-search | 4.1.4-3.6.6 |
| SUSE Manager Server Module 4.1 | spacewalk-setup | 4.1.7-3.6.5 |
| SUSE Manager Server Module 4.1 | spacewalk-web | 4.1.21-3.12.5 |
| SUSE Manager Server Module 4.1 | supportutils-plugin-susemanager | 4.1.4-3.3.5 |
| SUSE Manager Server Module 4.1 | susemanager | 4.1.22-3.14.6 |
| SUSE Manager Server Module 4.1 | susemanager-doc-indexes | 4.1-11.20.5 |
| SUSE Manager Server Module 4.1 | susemanager-docs_en | 4.1-11.20.5 |
| SUSE Manager Server Module 4.1 | susemanager-frontend-libs | 4.1.1-3.6.5 |
| SUSE Manager Server Module 4.1 | susemanager-schema | 4.1.17-3.16.2 |
| SUSE Manager Server Module 4.1 | susemanager-sls | 4.1.18-3.16.5 |
| SUSE Manager Server Module 4.1 | susemanager-sync-data | 4.1.8-3.6.5 |
| SUSE Manager Server Module 4.1 | uyuni-cluster-provider-caasp | 4.1.3-3.3.5 |
| SUSE Manager Server Module 4.1 | yomi-formula | 0.0.1+git.1604593202.a2c22bf-3.6.5 |
| Ubuntu Pro 18.04 LTS | libpgjava | 9.4.1212-1ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | libpgjava | 42.2.10-1ubuntu0.1~esm1 |
| Wolfi | mariadb-10.6-test | no fix |
| Wolfi | mariadb-11.2 | 11.2.3-r2 |
| Wolfi | mariadb-11.2-backup | 11.2.3-r2 |
| Wolfi | mariadb-11.2-bench | 11.2.3-r2 |
| Wolfi | mariadb-11.2-client | 11.2.3-r2 |
| Wolfi | mariadb-11.2-dev | 11.2.3-r2 |
| Wolfi | mariadb-11.2-doc | 11.2.3-r2 |
| Wolfi | mariadb-11.2-embedded | 11.2.3-r2 |
| Wolfi | mariadb-11.2-oci-entrypoint | 11.2.3-r2 |