Summary: | <dev-java/jdbc-postgresql-42.4.1: sql injection via crafted column names | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | IN_PROGRESS --- | ||
Severity: | minor | CC: | java |
Priority: | Normal | Keywords: | PullRequest |
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-r38f-c4h4-hqq2 | ||
See Also: |
https://github.com/gentoo/gentoo/pull/26736 https://github.com/gentoo/gentoo/pull/26868 |
||
Whiteboard: | B4 [stable] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 864817 | ||
Bug Blocks: |
Description
John Helmert III
2022-08-04 02:41:27 UTC
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bdca1d3f284d423db12c2cfab7750b4309cb2451 commit bdca1d3f284d423db12c2cfab7750b4309cb2451 Author: Volkmar W. Pogatzki <gentoo@pogatzki.net> AuthorDate: 2022-08-04 08:16:50 +0000 Commit: Florian Schmaus <flow@gentoo.org> CommitDate: 2022-08-10 06:04:38 +0000 dev-java/jdbc-postgresql: add 42.4.1 - CVE-2022-31197 Bug: https://bugs.gentoo.org/863506 Signed-off-by: Volkmar W. Pogatzki <gentoo@pogatzki.net> Closes: https://github.com/gentoo/gentoo/pull/26736 Signed-off-by: Florian Schmaus <flow@gentoo.org> dev-java/jdbc-postgresql/Manifest | 1 + .../jdbc-postgresql/jdbc-postgresql-42.4.1.ebuild | 60 ++++++++++++++++++++++ dev-java/jdbc-postgresql/metadata.xml | 10 ++-- 3 files changed, 67 insertions(+), 4 deletions(-) Thanks! Please stable when ready The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=27528c9faba395f5de105f08576283bd9867c2ba commit 27528c9faba395f5de105f08576283bd9867c2ba Author: Volkmar W. Pogatzki <gentoo@pogatzki.net> AuthorDate: 2022-08-15 07:54:37 +0000 Commit: John Helmert III <ajak@gentoo.org> CommitDate: 2022-08-15 17:20:39 +0000 dev-java/jdbc-postgresql: drop 42.4.0 Bug: https://bugs.gentoo.org/863506 Signed-off-by: Volkmar W. Pogatzki <gentoo@pogatzki.net> Closes: https://github.com/gentoo/gentoo/pull/26868 Signed-off-by: John Helmert III <ajak@gentoo.org> dev-java/jdbc-postgresql/Manifest | 1 - .../jdbc-postgresql/jdbc-postgresql-42.4.0.ebuild | 59 ---------------------- 2 files changed, 60 deletions(-) Thanks! |