In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchpostgresql14< 14.7-r0UNKNOWN
Alpineedge-mainnoarchpostgresql15< 15.2-r0UNKNOWN
Alpine3.13-mainnoarchpostgresql< 13.11-r0UNKNOWN
Alpine3.14-mainnoarchpostgresql< 13.10-r0UNKNOWN
Alpine3.15-communitynoarchpostgresql12< 12.15-r0UNKNOWN
Alpine3.15-mainnoarchpostgresql13< 13.10-r0UNKNOWN
Alpine3.15-mainnoarchpostgresql14< 14.7-r0UNKNOWN
Alpine3.16-communitynoarchpostgresql12< 12.15-r0UNKNOWN
Alpine3.16-mainnoarchpostgresql13< 13.10-r0UNKNOWN
Alpine3.16-mainnoarchpostgresql14< 14.7-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	postgresql14	< 14.7-r0	UNKNOWN
Alpine	edge-main	noarch	postgresql15	< 15.2-r0	UNKNOWN
Alpine	3.13-main	noarch	postgresql	< 13.11-r0	UNKNOWN
Alpine	3.14-main	noarch	postgresql	< 13.10-r0	UNKNOWN
Alpine	3.15-community	noarch	postgresql12	< 12.15-r0	UNKNOWN
Alpine	3.15-main	noarch	postgresql13	< 13.10-r0	UNKNOWN
Alpine	3.15-main	noarch	postgresql14	< 14.7-r0	UNKNOWN
Alpine	3.16-community	noarch	postgresql12	< 12.15-r0	UNKNOWN
Alpine	3.16-main	noarch	postgresql13	< 13.10-r0	UNKNOWN
Alpine	3.16-main	noarch	postgresql14	< 14.7-r0	UNKNOWN