Debian/libpgjava: critical 9.8
In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection prop
Action: Upgrade libpgjava to 42.3.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 42.3.3-1 | - |
Fixed versions
| 42.3.3-1 |
Sources
- osv: DEBIAN-CVE-2022-26520#Debian:13/libpgjava
- https://security-tracker.debian.org/tracker/CVE-2022-26520
published · modified · JSON