[Git][security-tracker-team/security-tracker][master] Add CVE-2025-49146/libpgjava

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
187070c5 by Salvatore Bonaccorso at 2025-06-11T22:44:22+02:00
Add CVE-2025-49146/libpgjava

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21,7 +21,9 @@ CVE-2025-49150 (Cursor is a code editor built for programming with AI. Prior to
 CVE-2025-49148 (ClipShare is a lightweight and cross-platform tool for clipboard shari ...)
 	TODO: check
 CVE-2025-49146 (pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until ...)
-	TODO: check
+	- libpgjava <unfixed>
+	NOTE: https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-hq9p-pm7w-8p54
+	NOTE: Fixed by: https://github.com/pgjdbc/pgjdbc/commit/9217ed16cb2918ab1b6b9258ae97e6ede244d8a0 (REL42.7.7-rc1)
 CVE-2025-48448 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)
 	NOT-FOR-US: Drupal core and addons
 CVE-2025-48447 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/187070c5f06ddf1c6413e5b98b1f504e311ed10c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/187070c5f06ddf1c6413e5b98b1f504e311ed10c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250611/de7e98a6/attachment.htm>