Skip to content
OpenAdvisories
High DSA-5196-1 2 CVEs

libpgjava - security update

Published Jul 31, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 libpgjava 42.2.5-2+deb10u1
Debian · 11 libpgjava 42.2.15-1+deb11u1

Vulnerabilities 2

  • High 7.0
    CVE-2022-21724

    Unchecked Class Instantiation when providing Plugin Classes

    pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc…

    libpgjava libpgjava org.postgresql:postgresql mariadb-11.2 Debian Ubuntu Alpine Wolfi Maven
  • Medium —
    CVE-2022-26520

    pgjdbc Arbitrary File Write Vulnerability

    In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could crea…

    libpgjava org.postgresql:postgresql Debian Maven