Alpine/postgresql14: critical 9.8
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can caus
Action: Upgrade postgresql14 to 11.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.1-r0 | - |
Fixed versions
| 11.1-r0 |
Sources
- osv: ALPINE-CVE-2018-16850#Alpine:v3.18/postgresql14
- https://security.alpinelinux.org/vuln/CVE-2018-16850
published · modified · JSON