Details
-
Fix
-
Status: Released (View Workflow)
-
Minor
-
Resolution: Fixed
-
2.5.8, 2.6.5
-
None
-
CVE-2024-1597
Description
Current Situation
JS7 Agent and JOC Cockpit are shipped with the JDBC Driver postgresql-42.4.3.jar. A vulnerability affects this version, https://nvd.nist.gov/vuln/detail/CVE-2024-1597.
We rate the impact to our software as low
Desired Behavior
JS7 components should ship with version 42.4.4 which fixes the issue.
Maintainer Notes
- PostgreSQL JDBC Drivers are available from https://jdbc.postgresql.org/download/