Skip to content

[Vulnerability] Upgrade postgresql maven dependency

There is a new vulnerability concerning the postgresql maven dependency → https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1597

Maven repository: https://mvnrepository.com/artifact/org.postgresql/postgresql

Note, we do not use the default property which is exploited by the vulnerability, so indeed we do not have a vulnerability but as a precaution we update the version.

In Squash 6, we use the 42.5.1 version.

The vulnerability fix is in the 42.5.5, so we need to upgrade to this version.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information