Alpine/postgresql15: low 3.7
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to
Action: Upgrade postgresql15 to 15.2-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 15.2-r0 | - |
Fixed versions
| 15.2-r0 |
Sources
- osv: ALPINE-CVE-2022-41862#Alpine:v3.17/postgresql15
- https://security.alpinelinux.org/vuln/CVE-2022-41862
published · modified · JSON