Alpine/postgresql12: low 3.7
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to
Action: Upgrade postgresql12 to 12.14-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.14-r0 | - |
Fixed versions
| 12.14-r0 |
Sources
- osv: ALPINE-CVE-2022-41862#Alpine:v3.18/postgresql12
- https://security.alpinelinux.org/vuln/CVE-2022-41862
published · modified · JSON