Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade PostgreSQL JDBC driver and sync PostgreSQL Docker tags #1354

Closed
volphy opened this issue Feb 6, 2022 · 0 comments · Fixed by #1361
Closed

Upgrade PostgreSQL JDBC driver and sync PostgreSQL Docker tags #1354

volphy opened this issue Feb 6, 2022 · 0 comments · Fixed by #1361

Comments

@volphy
Copy link

volphy commented Feb 6, 2022

Current code from the main branch uses PostgreSQL JDBC driver 42.2.4

implementation("org.postgresql:postgresql:42.2.4")

Unfortunately, this version contains several known security vulnerabilities.

The latest relaased version of the driver seems to fix them:
https://jdbc.postgresql.org/documentation/changelog.html#version_42.3.2

I have also found the following PostgreSQL Docker image tag discrepancy:

image: postgres:13
(13.x)
vs
image: postgres:9.6

Is it on purpose?

I have verified locally that Zally works after upgrading the JDBC driver and syncing Docker tags of the PostgreSQL Docker images used.

Can these changes be applied to the main branch and appear in the next release?

vadeg added a commit that referenced this issue Mar 7, 2022
…roject

Update Postgres version and cleanup project
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants