tocsin

Debian/postgresql-15: high 8.8

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code

Action: Upgrade postgresql-15 to 15.16-0+deb12u1 or later.

Affected

introducedfixedlast affected
015.16-0+deb12u1-

Fixed versions

15.16-0+deb12u1

Sources

published · modified · JSON