tocsin

Debian/postgresql-17: medium 4.2

Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that ap

Action: Upgrade postgresql-17 to 17.11-0+deb13u1 or later.

Affected

introducedfixedlast affected
017.11-0+deb13u1-

Fixed versions

17.11-0+deb13u1

Sources

published · modified · JSON