[Git][security-tracker-team/security-tracker][master] new libpgjava issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
58f37a03 by Moritz Muehlenhoff at 2026-10-08T11:49:39+02:00
new libpgjava issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -245,9 +245,15 @@ CVE-2026-107353 (traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.
 CVE-2026-107352 (Missing authorization checks in Amazon Athena engine version 3 request ...)
 	NOT-FOR-US: Amazon
 CVE-2026-107315 (pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pa ...)
-	TODO: check
+	- libpgjava <unfixed>
+	NOTE: https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-f64h-wr5q-3qf3
+	NOTE: https://github.com/pgjdbc/pgjdbc/commit/c8998c8e9632a7cdecb128dd7cd122d330b3598a (REL42.7.14)
 CVE-2026-107314 (pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 e ...)
-	TODO: check
+	- libpgjava <unfixed>
+	[trixie] - libpgjava <not-affected> (Vulnerable code not present, introduced in 42.7.11)
+	[bookworm] - libpgjava <not-affected> (Vulnerable code not present, introduced in 42.7.11)
+	NOTE: https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-rhp9-mr79-r74h
+	NOTE: https://github.com/pgjdbc/pgjdbc/commit/a65ef98fe37bf0ecbd1a6331205cdb924985ed75 (REL42.7.14)
 CVE-2026-107285 (The AsyncHttpClient (AHC) library allows Java applications to easily e ...)
 	- async-http-client <unfixed>
 	NOTE: https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-3wp9-xfwm-rjjf



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58f37a03429e75aecb60fee42ff65995098327e8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/58f37a03429e75aecb60fee42ff65995098327e8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/05c334f6/attachment.htm>