LWN.net

SQL injection vulnerabilities in PostgreSQL

A recent urgent update to PostgreSQL vividly demonstrates the problems with validating user input that are the foundation of SQL injection attacks. Widely used techniques to escape characters in user ...
Phoronix

PostgreSQL Sees New Releases For 52 Security Vulnerabilities, 140+ Bug Fixes

Ads are what make it possible to produce new content on Phoronix each and every day over the past 20 years. Please support Phoronix by disabling your ad blocker. Alternatively, you can join Phoronix ...
GIGAZINE

SQL injection vulnerability in PostgreSQL went undiscovered for over nine years and was used to break into the US Treasury Department

On December 30, 2024, a 'Chinese government-sponsored advanced persistent threat actor' breached a system managing confidential data for the U.S. Treasury Department. It was discovered that the ...
CSOonline

PostgreSQL patches SQLi vulnerability likely exploited in BeyondTrust attacks

Attackers who exploited a zero-day vulnerability in BeyondTrust Privileged Remote Access and Remote Support products in December likely also exploited a previously unknown SQL injection flaw in ...

Even if a 200 is returned, it cannot be called a success: Reflections on determining actual damage from 9,671 SQL injection attempts

In the logs of a domestic site we analyzed, SQL injection was the category with the largest numbers. There were 9,671 ...
LWN.net

SQL injection vulnerabilities in PostgreSQL

You would be right but for the internet. When systems were not interconnected, or the interconnect was slow and limited, local encodings worked fine. Nowadays with dataflows all over the world ...

「PostgreSQL」でセキュリティアップデート、「PostgreSQL 14」は最後の更新に／52件の脆弱性と、ここ数カ月に報告された140件を超える ...

オープンソースのリレーショナルデータベース（RDB）システム「PostgreSQL」で11月12日、セキュリティアップデートが実施された。52件の脆弱性と、ここ数カ月に報告された140件を超える不具合が修正されている。 各系列で提供された修正版は、以下の通り。旧バージョンの利用者には更新が推奨される。次期メジャーバージョン「PostgreSQL ...