MGASA-2025-0155

Source
https://advisories.mageia.org/MGASA-2025-0155.html
Import Source
https://advisories.mageia.org/MGASA-2025-0155.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2025-0155
Related
Published
2025-05-13T19:41:57Z
Modified
2025-05-13T19:07:16Z
Summary
Updated postgresql15 & postgresql13 packages fix security vulnerability
Details

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation. (CVE-2025-4207)

References
Credits

Affected packages

Mageia:9 / postgresql15

Package

Name
postgresql15
Purl
pkg:rpm/mageia/postgresql15?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
15.13-1.mga9

Ecosystem specific

{
    "section": "core"
}

Mageia:9 / postgresql13

Package

Name
postgresql13
Purl
pkg:rpm/mageia/postgresql13?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
13.21-1.mga9

Ecosystem specific

{
    "section": "core"
}