Skip to content

Upgrade PostgreSQL JDBC driver to 42.5.0#13840

Merged
ebyhr merged 1 commit intotrinodb:masterfrom
ebyhr:ebi/postgres-42.4.2
Aug 25, 2022
Merged

Upgrade PostgreSQL JDBC driver to 42.5.0#13840
ebyhr merged 1 commit intotrinodb:masterfrom
ebyhr:ebi/postgres-42.4.2

Conversation

@ebyhr
Copy link
Copy Markdown
Member

@ebyhr ebyhr commented Aug 25, 2022

Description

Upgrade PostgreSQL JDBC driver to 42.5.0
https://jdbc.postgresql.org/documentation/changelog.html#version_42.5.0
Closes #13790

Documentation

(x) No documentation is needed.

Release notes

(x) No release notes entries required.

This upgrade contains fix for CVE-2022-31197.
The connector had no effect because ResultSet.refreshRow
method is unused.
@ebyhr ebyhr added the no-release-notes This pull request does not require release notes entry label Aug 25, 2022
@cla-bot cla-bot bot added the cla-signed label Aug 25, 2022
@ebyhr ebyhr requested review from hashhar and wendigo August 25, 2022 00:18
Copy link
Copy Markdown
Contributor

@wendigo wendigo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@ebyhr ebyhr merged commit e051a0f into trinodb:master Aug 25, 2022
@ebyhr ebyhr deleted the ebi/postgres-42.4.2 branch August 25, 2022 06:22
@github-actions github-actions bot added this to the 394 milestone Aug 25, 2022
@findepi
Copy link
Copy Markdown
Member

findepi commented Aug 25, 2022

Closes #13790

@trinodb/maintainers @colebow do you think we should document addressed CVEs in release notes?
i think it would be nice.

@martint
Copy link
Copy Markdown
Member

martint commented Aug 25, 2022

Only if Trino is actually affected. As far as I understand it, the linked issue is a false positive

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed no-release-notes This pull request does not require release notes entry

Development

Successfully merging this pull request may close these issues.

postgres JDBC CVE-2022-31197

5 participants