Red Hat Security AdvisoryRHSA-2021:5236
postgresql:13 security update
Released 2021-12-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13 +47
Fixes 2 records
Priority LOW 39
When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established,…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01901 · Published 2022-03-04 · Partial fix CWE-89
Priority LOW 32
A flaw was found in postgresql.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01442 · Published 2022-03-02 · Fixed CWE-200
