tocsin

Debian/postgresql-13: high 8.1

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection i

Action: Upgrade postgresql-13 to 13.5-0+deb11u1 or later.

Affected

introducedfixedlast affected
013.5-0+deb11u1-

Fixed versions

13.5-0+deb11u1

Sources

published · modified · JSON