tocsin

Alpine/postgresql15: high 8.8

Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system accoun

Action: Upgrade postgresql15 to 15.18-r0 or later.

Affected

introducedfixedlast affected
015.18-r0-

Fixed versions

15.18-r0

Sources

published · modified · JSON