ALT-PU-2025-6871-1

Обновление пакета postgresql15-pgpool-II в ветке sisyphus_loongarch64

Версия4.6.1-alt1
Задание#0
Опубликовано2025-05-15
Макс. серьёзностьCRITICAL
Серьёзность:

Закрытые проблемы (1)

CVE-2025-46801
CRITICAL9.3

Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.

Опубликовано: 2025-05-19Изменено: 2026-04-15
CVSS 3.xКРИТИЧЕСКАЯ 9.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 4.0КРИТИЧЕСКАЯ 9.3
CVSS:4.0/CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X