From dfb5ad7cf0d83ac3bb78f0177721f68a6ba60486 Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Mon, 6 Feb 2023 11:43:10 -0500 Subject: [PATCH] Last-minute updates for release notes. Security: CVE-2022-41862 --- doc/src/sgml/release-14.sgml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/doc/src/sgml/release-14.sgml b/doc/src/sgml/release-14.sgml index f4d6d11ca4d..f8d317034c2 100644 --- a/doc/src/sgml/release-14.sgml +++ b/doc/src/sgml/release-14.sgml @@ -35,6 +35,35 @@ + + libpq can leak memory contents after + GSSAPI transport encryption initiation fails (Jacob Champion) + + + + A modified server, or an unauthenticated man-in-the-middle, can + send a not-zero-terminated error message during setup of GSSAPI + (Kerberos) transport encryption. libpq + will then copy that string, as well as following bytes in + application memory up to the next zero byte, to its error report. + Depending on what the calling application does with the error + report, this could result in disclosure of application memory + contents. There is also a small probability of a crash due to + reading beyond the end of memory. Fix by properly zero-terminating + the server message. + (CVE-2022-41862) + + + + +