Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-113774

Update the postgres.jar JDBC Driver that is bundled with Liferay

    XMLWordPrintable

    Details

    • Type: Feature Request
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Environments > Databases
    • Labels:
      None

      Description

      In Liferay's latest DXP offering at the time of writing (7.2 SP1), it is bundled with the Postgres JDBC driver version 42.0.0.

      There is at least one security vulnerability with this .jar: https://nvd.nist.gov/vuln/detail/CVE-2018-10936

      This .jar may also resolve issues when using SSL verification in some environments.

      The latest driver may be found at https://jdbc.postgresql.org/download.html.

        Attachments

          Activity

            People

            Assignee:
            support-lep@liferay.com SE Support
            Reporter:
            christopher.lui Christopher Lui
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:

                Packages

                Version Package