Red Hat Security AdvisoryRHSA-2022:8560
hsqldb security update
Released 2022-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) hsqldb-1:1.8.1.3-15.el7_9, hsqldb-demo-1:1.8.1.3-15.el7_9, hsqldb-javadoc-1:1.8.1.3-15.el7_9 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) hsqldb-1:1.8.1.3-15.el7_9, hsqldb-demo-1:1.8.1.3-15.el7_9, hsqldb-javadoc-1:1.8.1.3-15.el7_9 +1
- Red Hat Enterprise Linux Server (v. 7) hsqldb-1:1.8.1.3-15.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) hsqldb-1:1.8.1.3-15.el7_9, hsqldb-demo-1:1.8.1.3-15.el7_9, hsqldb-javadoc-1:1.8.1.3-15.el7_9 +1
- Red Hat Enterprise Linux Workstation (v. 7) hsqldb-1:1.8.1.3-15.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) hsqldb-demo-1:1.8.1.3-15.el7_9, hsqldb-javadoc-1:1.8.1.3-15.el7_9, hsqldb-manual-1:1.8.1.3-15.el7_9
Fixes 1 record
Priority MEDIUM 51
Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05145 · Published 2022-10-06 · Partial fix · 2.7.1 CWE-470
