ohdsi / databaseconnectorjars

An R package containing the external JAR dependencies of the DatabaseConnector package.

DatabaseConnectorJars

Introduction

This R package contains the external JAR dependencies of the DatabaseConnector package. It contains no user-executable functions.

Technology

DatabaseConnectorJars is an R package.

System Requirements

Requires R. Also requires Java 1.6 or higher.

Dependencies

Requires rJava.

Getting Involved

• Package manual: DatabaseConnectorjars manual
• Developer questions/comments/feedback: OHDSI Forum
• We use the GitHub issue tracker for all bugs/issues/enhancements

License

DatabaseConnectorJars is licensed under Apache License 2.0. The JDBC drivers fall under their own respective licenses.

Development

DatabaseConnectorJars is being developed in R Studio.

Development status

Obsolete. No longer needed for newer versions of DatabaseConnector.

Acknowledgements

• This project is supported in part through the National Science Foundation grant IIS 1251151.

databaseconnectorjars's Issues

Flexibility on driver versions

When working to implement with a new site, I encountered an issue with the Oracle drivers.

The driver in this repo is not universally backwards compatible with older oracle database interfaces. When attempting to connect to the Oracle database, we found we needed ojdbc8-19.3.0.0 to create a successful connection.

We manually downloaded the driver from the maven repository and implemented it successfully, but would such a flexibility (specifying driver versions like we select package tags) be a functionality that would be useful?

postgresql-42.2.5.jre6.jar vulnerabilities

The postgresql-42.2.5.jre6.jar driver

https://github.com/OHDSI/DatabaseConnectorJars/blob/master/inst/java/postgresql-42.2.5.jre6.jar

has been flagged as vulnerable CVE-2020-13692 https://nvd.nist.gov/vuln/detail/CVE-2020-13692

Would it be possible to update to 42.2.13 or the latest?

Update Redshift driver

On RHEL, the current Redshift driver does not work. It gets stuck on the connect step. I've tested with the latest driver (https://s3.amazonaws.com/redshift-downloads/drivers/jdbc/1.2.20.1043/RedshiftJDBC4-no-awssdk-1.2.20.1043.jar), and it works now.

Update PostgreSQL driver

Spark driver - log4j

From Databricks' JDBC driver page:

"Please note that versions of the Simba JDBC driver prior to 2.6.21 have a dependency on a library with a known vulnerability. Please see CVE-2021-44228 for more details. It is your responsibility to validate that your use case is not affected before using or continuing to use this driver"

We should update to 2.6.21: https://databricks.com/spark/jdbc-drivers-download

MS SQL JDBC driver version?

The documentation is lacking on which version of the MS SQL JDBC driver you're using. For traceability, it would be nice to have the version numbers and links to the sources where you got the JAR files from.