Update to Postgres driver version 42.7.7#1092
Update to Postgres driver version 42.7.7#1092labkey-susanh merged 1 commit intorelease25.3-SNAPSHOTfrom
Conversation
labkey-jeckels
left a comment
labkey-jeckels
left a comment
There was a problem hiding this comment.
Looks good, pending positive feedback from TeamCity.
|
@labkey-susanh @labkey-jeckels As mentioned in the "Upgrade Dependencies" doc, we've been holding off upgrading the PG JDBC driver due to a metadata retrieval performance issue that @labkey-tchad filed. Doesn't look like that's been fixed... or has it? Are we okay upgrading with this degradation in place? |
Thanks, @labkey-adam. I didn't realize/remember that this was a thing. I think we're probably safe to suppress this CVE since it's related to functionality that we do not use. Anyone disagree? |
Sounds correct to me. |
3 participants
Rationale
CVE-2025-49146 Affects versions from 42.7.4 until 42.7.7. We are not at risk since we do not configure channel binding, but good to update just the same.
Changes
postgresDriverVersion