Ubuntu
h2database package

h2database 1.4.197-4+deb10u1build0.20.04.1 source package in Ubuntu

Changelog

h2database (1.4.197-4+deb10u1build0.20.04.1) focal-security; urgency=medium

  * fake sync from Debian

h2database (1.4.197-4+deb10u1) buster-security; urgency=high

  * Team upload.
  * Security researchers of JFrog Security and Ismail Aydemir discovered two
    remote code execution vulnerabilities in the H2 Java SQL database engine
    which can be exploited through various attack vectors, most notably through
    the H2 Console and by loading custom classes from remote servers through
    JNDI. The H2 console is a developer tool and not required by any
    reverse-dependency in Debian. It has been disabled in (old)stable
    releases. Database developers are advised to use at least version
    2.1.210-1, currently available in Debian unstable.

 -- David Fernandez Gonzalez <email address hidden>  Tue, 05 Apr 2022 12:31:03 +0200

Upload details

Uploaded by:
David Fernandez Gonzalez
Uploaded to:
Focal
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
java
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates universe misc
Focal security universe misc

Builds

Focal: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
h2database_1.4.197.orig.tar.xz 2.2 MiB 728b1171cbfd160a84c246463e0df700c08ed6c49ef30a37663b209bba0bf420
h2database_1.4.197-4+deb10u1build0.20.04.1.debian.tar.xz 14.1 KiB c1b10ab17457c1ff52e3a2c7ad9b62da0387bbf79c584c882c0cc362358138f4
h2database_1.4.197-4+deb10u1build0.20.04.1.dsc 2.0 KiB 745844780cb2dc7759f187132d3ebb408f2757229bfc0014cf4008d2a53c8b59

View changes file

Binary packages built by this source

libh2-java: H2 Database Engine

 H2 is a relational database management system supporting a subset
 of the SQL standard. The main programming APIs are SQL and JDBC,
 however the database also supports using the PostgreSQL ODBC driver
 by acting like a PostgreSQL server.
 .
 The main features of H2 are:
 .
  - Very fast, open source, JDBC API.
  - Embedded and server modes; in-memory databases.
  - Browser based Console application.
  - Small footprint

libh2-java-doc: H2 Database Engine (documentation)

 H2 is a relational database management system supporting a subset
 of the SQL standard. The main programming APIs are SQL and JDBC,
 however the database also supports using the PostgreSQL ODBC driver
 by acting like a PostgreSQL server.
 .
 The main features of H2 are:
 .
  - Very fast, open source, JDBC API.
  - Embedded and server modes; in-memory databases.
  - Browser based Console application.
  - Small footprint
 .
 This package includes the API documentation.