tocsin

Debian/postgresql-15: high 8.8

Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inpu

Action: Upgrade postgresql-15 to 15.19-0+deb12u1 or later.

Affected

introducedfixedlast affected
015.19-0+deb12u1-

Fixed versions

15.19-0+deb12u1

Sources

published · modified · JSON