Поиск уязвимостей

Уязвимость системы управления базами данных PostgreSQL, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код

ALT-PU-2021-3349: package `postgresql13-1C` update to version 13.3-alt5

ALT-PU-2021-3255: package `postgresql13-1C` update to version 13.3-alt5

ALT-PU-2021-3350: package `postgresql9.6` update to version 9.6.24-alt1

ALT-PU-2021-3348: package `postgresql13` update to version 13.5-alt1

ALT-PU-2021-3347: package `postgresql12` update to version 12.9-alt1

ALT-PU-2021-3346: package `postgresql11` update to version 11.14-alt1

ALT-PU-2021-3345: package `postgresql10` update to version 10.19-alt1

ALT-PU-2021-3254: package `postgresql13` update to version 13.5-alt1

ALT-PU-2021-3253: package `postgresql12` update to version 12.9-alt1

ALT-PU-2021-3252: package `postgresql11` update to version 11.14-alt1

ALT-PU-2021-3251: package `postgresql10` update to version 10.19-alt1

ALT-PU-2021-3250: package `postgresql14` update to version 14.1-alt1

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established despite the use of SSL certificate verification and encryption.

When the server is configured to use trust authentication with a clien ...

Moderate: postgresql:10 security update

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.