Summary
[16.14-1]
- Rebase to upstream release 16.14
- Resolves: RHEL-192240
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libpq | 0:16.14-1.el10_2 |
| Oracle Linux · 10 | libpq-devel | 0:16.14-1.el10_2 |
Vulnerabilities 1
-
High 8.8
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like ge…