Alpine/postgresql: low 3.7
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to
Action: Upgrade postgresql to 13.10-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 12.0 | 13.10-r0 | - |
Fixed versions
| 13.10-r0 |
Sources
- osv: ALPINE-CVE-2022-41862#Alpine:v3.14/postgresql
- https://security.alpinelinux.org/vuln/CVE-2022-41862
published · modified · JSON