Red Hat Security Advisory

RHSA-2023:1693

postgresql security update

Released 2023-04-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) postgresql-docs-13.10-1.el9_1, postgresql-private-devel-13.10-1.el9_1, postgresql-server-devel-13.10-1.el9_1 +3
Red Hat Enterprise Linux AppStream (v. 9) postgresql-13.10-1.el9_1, postgresql-contrib-13.10-1.el9_1, postgresql-plperl-13.10-1.el9_1 +5

TI-2022-02427 CVE-2022-2625 · GHSA-m7mv-m566-78j6

MEDIUM 41

A vulnerability was found in PostgreSQL.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.02154 Published 2022-08-18 Partial fix CWE-915

TI-2022-20211 CVE-2022-41862 · GHSA-fr68-cm8v-7vv6

LOW 19

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00622 Published 2023-03-03 Partial fix CWE-200