tocsin

Debian/postgresql-17: high 8.8

SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ... REFRESH PUBLICATION allows a subscriber table creator to execute arbitrary SQL with the subscription's publication-side credentia

Action: Upgrade postgresql-17 to 17.10-0+deb13u1 or later.

Affected

introducedfixedlast affected
017.10-0+deb13u1-

Fixed versions

17.10-0+deb13u1

Sources

published · modified · JSON