RHSA-2023:1815: Low: Red Hat Integration Debezium 2.1.4 security update

Published Apr 17, 2023
·
Updated

Debezium is a distributed platform that turns your existing databases into event streams, so applications can see and respond immediately to each row-level change in the databases.Debezium is built on top of Apache Kafka and provides Kafka Connect compatible connectors that monitor specific database management systems. Debezium records the history of data changes in Kafka logs, from where your application consumes them. This makes it possible for your application to easily consume all of the events correctly and completely. Even if your application stops unexpectedly, it will not miss anything: when the application restarts, it will resume consuming the events where it left off.Security Fix(es): jdbc-postgresql: postgresql-jdbc: PreparedStatement.setText(int, InputStream) will create a temporary file if the InputStream is larger than 2k (CVE-2022-41946) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

2 affected components
Debezium Debezium
PostgreSQL jdbc-postgresql

Remediation

Event History

Apr 17, 2023
Advisory Published
12:00 AM
Data Sourced
12:00 AM
RemedyDescriptionAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of RHSA-2023:1815?

The severity of RHSA-2023:1815 is classified as low.

2

How do I fix RHSA-2023:1815?

To fix RHSA-2023:1815, it is recommended to update to the latest version of the affected Debezium components.

3

What software is affected by RHSA-2023:1815?

RHSA-2023:1815 affects the Debezium platform used for change data capture from existing databases.

4

What type of vulnerability is referenced in RHSA-2023:1815?

RHSA-2023:1815 addresses a security vulnerability in Debezium related to its integration with Apache Kafka.

5

Is there an exploit available for RHSA-2023:1815?

As of now, there has been no public disclosure of an exploit for RHSA-2023:1815.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203