A file postgresql-42.5.0.jar is found in Oracle, SQL Server, and SQL PI repository database cartridge versions below 7.3 (such as 7.1.0.10).
This file includes critical severity vulnerability CVE-2024-1597 and CVE 2022 41946.
The postgresql driver used by the Oracle, SQL Server, and SQL PI repository agents was present for Infobright SQL PI compatibility in earlier Foglight releases and is no longer used.
Beginning in the 7.3.0.10 and higher releases of the Oracle cartridges, the postgresql driver has been removed as part of FOG-8606. If can be removed manually from the Oracle cartridge in 7.1.
The postgresql driver has been upgraded in the SQL Server cartridges (7.3.x through 8.1) to postgresql-42.7.7.jar.
