Update MSSQL driver version

[AndreVirtimo]

Hello,

can you update the driver version for mssql to mitigate https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59250 ?

I'm not sure, maybe 12.6.5 is the best match.

[grgrzybek]

Hello,

To be honest I'm quite busy with other projects right now, but there's no urgency to update Pax JDBC to new MSSQL driver. The only place where this driver is used is this Karaf feature:

    <feature name="pax-jdbc-mssql" description="Provides JDBC MSSQL DataSourceFactory" version="${project.version}">
        <feature>pax-jdbc-spec</feature>

        <bundle>mvn:com.microsoft.sqlserver/mssql-jdbc/${version.com.microsoft.sqlserver.jdbc}</bundle>
    </feature>   

So if you don't use Karaf there's nothing you should do.
But even if you do use Karaf, you can simply ignore this feature and just install pax-jdbc-spec feature and the driver version you want.

I won't close this issue and maybe get back to Pax JDBC at some point.

[AndreVirtimo]

Hello,

I'm asking because we are using pax-jdbc-mssql. Is there an example how to use pax-jdbc-spec with another driver version?

[grgrzybek]

No real "example", but if you're using pax-jdbc-mssql Karaf feature, you see that it consists of:

• pax-jdbc-spec feature - so you just install it using feature:install pax-jdbc-spec
• mvn:com.microsoft.sqlserver/mssql-jdbc/${version.com.microsoft.sqlserver.jdbc} bundle - so you just install it separately using install -s mvn:com.microsoft.sqlserver/mssql-jdbc/<any-version-you-like>