[Git][security-tracker-team/security-tracker][master] Add CVE-2022-31197/libpgjava

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ca895695 by Salvatore Bonaccorso at 2022-08-04T22:30:01+02:00
Add CVE-2022-31197/libpgjava

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16113,7 +16113,9 @@ CVE-2022-1797 (A malformed Class 3 common industrial protocol message with a cac
 CVE-2022-31198 (OpenZeppelin Contracts is a library for secure smart contract developm ...)
 	NOT-FOR-US: OpenZeppelin
 CVE-2022-31197 (PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to conn ...)
-	TODO: check
+	- libpgjava <unfixed>
+	NOTE: https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-r38f-c4h4-hqq2
+	NOTE: https://github.com/pgjdbc/pgjdbc/commit/739e599d52ad80f8dcd6efedc6157859b1a9d637 (REL42.4.1-rc1)
 CVE-2022-31196
 	RESERVED
 CVE-2022-31195 (DSpace open source software is a repository application which provides ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca895695b2048189a9707941462383907b3cc216

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca895695b2048189a9707941462383907b3cc216
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220804/c2bc62ed/attachment-0001.htm>