Import Debian changes 9.4.1212-1+deb9u1
libpgjava (9.4.1212-1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * It was found that libpgjava, the offical PostgreSQL JDBC Driver, would be vulnerable if an attacker controlled jdbc url or properties. The JDBC driver did not verify if certain classes implemented the expected interface before instantiating the class. This can lead to code execution loaded via arbitrary classes.
Loading
Please register or sign in to comment