WarehousePG authorization issue vulnerability

Versions WarehousePG 7.2.1 through 7.6.0 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in the built-in function gplogbackendmemorycontexts. Any authenticated database role can run without requiring GRANT permissions, thereby bypassing...

CVE-2023-25824

CVE-2023-25824 affects the Mod_gnutls TLS module for Apache HTTPD (GnuTLS-based). Versions 0.9.0 through 0.12.0 do not properly fail blocking read operations on TLS connections when the transport times out, instead entering an endless loop that can consume CPU resources and, if trace logging is e...