tocsin

Debian/postgresql-17: medium 5.4

Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the

Action: Upgrade postgresql-17 to 17.10-0+deb13u1 or later.

Affected

introducedfixedlast affected
017.10-0+deb13u1-

Fixed versions

17.10-0+deb13u1

Sources

published · modified · JSON