Alpine/postgresql14: low 3.7
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to
Action: Upgrade postgresql14 to 14.7-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.7-r0 | - |
Fixed versions
| 14.7-r0 |
Sources
- osv: ALPINE-CVE-2022-41862#Alpine:v3.17/postgresql14
- https://security.alpinelinux.org/vuln/CVE-2022-41862
published · modified · JSON