CVE-2024-1597 Vulnerability in quarkus-jdbc-postgresql dependency

[ruhilrinku]

CVE-2024-1597 Vulnerability in quarkus-jdbc-postgresql dependency.

ETA please ?

[gsmet]

The update has been merged to the main branch and will be released as part of 3.8.1 on March 6th.

Note that as explained in the CVE description you pointed, people using the default query mode are NOT affected.

If you think you may be affected, you can enforce the driver version in your local POM files while waiting for March 6th.

[ruhilrinku]

Thanks for quick response. It is not allowing me to enforce the newer driver version with gradle. an example will help. Thanks in advance

[gsmet]

In the end, it will be included in this Wednesday's release.

[gsmet]

3.8.1 was released today and it contains the update.