Threats Tagged 'cve-2026-6475'

This security update for postgresql17 addresses multiple vulnerabilities by updating to version 17. 10. The fixes include privilege checks, integer overflow prevention, protection against malicious time zone names, path traversal prevention, proper quoting of subscription and object names, marking unsafe functions, timing-safe string comparisons, recursion limits, and prevention of SQL injection and buffer overruns. Non-security improvements related to system updates are also included.

CVE-2026-6475 is a high-severity vulnerability in PostgreSQL affecting versions prior to 18. 4, 17. 10, 16. 14, 15. 18, and 14. 23. It involves symbolic link (symlink) following in the pg_basebackup plain format and pg_rewind utilities, allowing an origin superuser to overwrite local files such as /var/lib/postgres/. bashrc. This can lead to hijacking the operating system account if relevant actions are taken between these commands and server restart. The vulnerability relies on the implicit trust of the origin superuser when starting the server, especially with features like shared_preload_libraries.