PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

PostgreSQL has patched a type confusion flaw that allows an authenticated database user to run code on the server. This vulnerability, which has been present for 22 years, enables authenticated remote code execution. The issue is fixed in recently released updates, which also address 51 other security flaws. To ensure full protection, users must also rebuild any C-language extensions installed on the server. The vulnerability has a CVSS score of 8.8, indicating a high level of severity. Any code executed through this flaw runs with the rights of the operating system.