[FLINK-30177] Update pgjdbc to fix CVE-2022-41946

• Type: Technical Debt
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: jdbc-3.1.0
• Component/s: Connectors / JDBC
• Labels: pull-request-available
• Assignee: Sergey Nuyanzin
• Reporter: Sergey Nuyanzin
• Created: 23/Nov/22 22:03
• Updated: 14/Dec/22 12:40
• Resolved: 24/Nov/22 08:31

Description

There is CVE-2022-41946 fixed in 42.5.1, 42.4.3 42.3.8, 42.2.27.jre7.
Also mentioned in released notes
https://jdbc.postgresql.org/changelogs/2022-11-23-42.5.1-release/

Issue Links

• links to: GitHub Pull Request #21378