Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oxqgp-0002Hm-Hf for pgsql-jdbc@arkaria.postgresql.org; Wed, 23 Nov 2022 14:25:27 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1oxqgo-0008Ff-Dx for pgsql-jdbc@arkaria.postgresql.org; Wed, 23 Nov 2022 14:25:26 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oxqgo-0008Df-4o for pgsql-jdbc@lists.postgresql.org; Wed, 23 Nov 2022 14:25:26 +0000 Received: from out-22.smtp.github.com ([192.30.252.205] helo=smtp.github.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oxqgl-0007Ld-PE for pgsql-jdbc@lists.postgresql.org; Wed, 23 Nov 2022 14:25:25 +0000 Received: from github.com (hubbernetes-node-075089d.ac4-iad.github.net [10.52.200.97]) by smtp.github.com (Postfix) with ESMTPA id 72F457201F2 for ; Wed, 23 Nov 2022 06:25:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1669213522; bh=eotKiqLV6vyrRC61ToabFYrRjLsQ6MM35dLazyLGk3Q=; h=Date:From:To:Subject:From; b=QqNDEa9+RfRnHtDLxz88mZe9vmjaRIn3/5YK8kZTWpSb8nYNvpyKn7GRq6vgGlsj9 CJRAJMmN6QIT4kfg4eps3qJsOYLCV6UlRrY2lj51QUulIMdkHPFlb0SQEVNTBuA8Pv /1lpZubBqh+dDFm2wKsWUAy+XgDcnkPWCfAMlNCE= Date: Wed, 23 Nov 2022 06:25:22 -0800 From: Dave Cramer To: pgsql-jdbc@lists.postgresql.org Message-ID: Subject: [pgjdbc/pgjdbc] 9008dc: Merge pull request from GHSA-562r-vg33-8x8h Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Approved: 58GruLoMopuc X-GitHub-Recipient-Address: pgsql-jdbc@lists.postgresql.org X-Auto-Response-Suppress: All List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Branch: refs/heads/master Home: https://github.com/pgjdbc/pgjdbc Commit: 9008dc9aade6dbfe4efafcd6872ebc55f4699cf5 https://github.com/pgjdbc/pgjdbc/commit/9008dc9aade6dbfe4efafcd6872ebc55f4699cf5 Author: Dave Cramer Date: 2022-11-23 (Wed, 23 Nov 2022) Changed paths: M CHANGELOG.md M contributors.json A docs/content/changelogs/2022-11-21-42.5.1-release.md M docs/data/homepagedata.toml M docs/data/versions.toml M docs/layouts/partials/home/info.html M pgjdbc/src/main/java/org/postgresql/util/StreamWrapper.java Log Message: ----------- Merge pull request from GHSA-562r-vg33-8x8h * Fix: createTempFile vulnerability on unix like systems where temporary files can be read by other users on the system * Update site with change logs and new version information