A vulnerability in PostgreSQL allows executing SQL code with the permissions of the user running pg_dump.
Correction updates have been issued for all supported branches of PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20, addressing 56 bugs identified over the past three months. Among other things, the new versions fix a vulnerability (CVE-2024-7348), classified as dangerous (severity level 8.8 out of 10). This vulnerability is caused by a race condition in the pg_dump utility, allowing an attacker with the ability to create and delete persistent objects […]
