RA CVE-2022-21724: EDB JDBC Connector, Replication Server, Migration Toolkit, ED

Customer Portal
Customer Portal

This article was originally published on March 04, 2022

WHAT’S NEW

Several EDB software components that use JDBC have been identified as being affected by CVE-2022-21724. This update is notifying you of new releases of software to address this vulnerability as well as instructions for mitigating risk for software not yet available. EDB recommends applying these upgrades as soon as possible.

The following EDB software has new releases available:

  • EDB JDBC Connector
  • Replication Server 6.2.17 and 7.0.1

In addition, the new EDB JDBC Connector 42.3.2.1 that has been released can be manually installed for the following EDB tools until new releases are available:

  • Migration Toolkit
  • EDB*Plus

Recommended Upgrades

Further details on this update are as follows:

Tool

Description

Technical Alert / Update

EDB JDBC Connector

Connect between a Java application and an EDB Postgres Advanced Server.

42.3.2.1

Replication Server 

Synchronize data from or to non-Postgres databases to or from Postgres database and between Postgres databases.

6.2.17

7.0.1

Migration Toolkit

Migrate tables and data from your DBMS to PostgreSQL or EDB Postgres Advanced Server.

JDBC Driver Upgrade (MTK)

EDB*Plus

Query EDB Postgres Advanced Server in a command-line interface with SPL anonymous blocks, SQL or Oracle SQL*Plus compatible commands.

JDBC Driver Upgrade (EDB*Plus)

 
 

TELL ME MORE

For more product details, please review the following EDB documentation:


IS THIS UPDATE FOR ME?

This announcement is for EDB customers who use Replication Server and Migration Toolkit and have a subscription plan purchased for:

  • Standard
  • Enterprise

JDBC Connector and EDB*Plus customers require an Enterprise subscription plan.


HOW TO GET THE UPDATE AND APPLY IT

Replication Server 6.2.17 and 7.0.1 are available in EDB Repos in the form of RPM and DEB native packages. It is also packaged and delivered as interactive installers available on the EDB Downloads site.

Instructions on upgrading to the EDB JDBC Connector 42.3.2.1 are detailed for Migration Toolkit and EDB*Plus.


TROUBLESHOOTING 

If you experience any problems around the installation, migration, upgrade, or general use of your EDB software, please contact our Technical Support teams.

Customers may reach us at the EDB Customer Support Portal, and we’re also available 24x7 via email and phone at the details below:

techsupport@enterprisedb.com

trial-help@enterprisedb.com

US +1-732-331-1320 / 1-800-235-5891

UK +44-2033719820

Brazil +55-2139581371

India +91-20-66449612

Was this article helpful?

0 out of 0 found this helpful