Lucene search

DebianDEBIAN:DLA-3651-1:FDE0A

HistoryNov 14, 2023 - 8:35 a.m.

[SECURITY] [DLA 3651-1] postgresql-11 security update

2023-11-1408:35:03

lists.debian.org

memory disclosure

cve-2023-5869

integer overflow

cve-2023-5870

denial of service

cve-2023-5868

buffer overflows

debian 10 buster

postgresql

security update

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.2%

JSON

Debian LTS Advisory DLA-3651-1 [email protected]
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
November 14, 2023 https://wiki.debian.org/LTS

Package : postgresql-11
Version : 11.22-0+deb10u1
CVE ID : CVE-2023-5868 CVE-2023-5869 CVE-2023-5870

Several vulnerabilities have been discovered in the PostgreSQL
database system.

CVE-2023-5868

Jingzhou Fu discovered a memory disclosure flaw in aggregate
function calls.

CVE-2023-5869

Pedro Gallegos reported integer overflow flaws resulting in buffer
overflows in the array modification functions.

CVE-2023-5870

Hemanth Sandrana and Mahendrakar Srinivasarao reported that the
pg_cancel_backend role can signal certain superuser processes,
potentially resulting in denial of service.

For Debian 10 buster, these problems have been fixed in version
11.22-0+deb10u1.

We recommend that you upgrade your postgresql-11 packages.

For the detailed security status of postgresql-11 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/postgresql-11

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian10allpostgresql-doc-11< 11.22-0+deb10u1postgresql-doc-11_11.22-0+deb10u1_all.deb
Debian10alllibpgtypes3< 11.22-0+deb10u1libpgtypes3_11.22-0+deb10u1_all.deb
Debian10allpostgresql-plperl-11< 11.22-0+deb10u1postgresql-plperl-11_11.22-0+deb10u1_all.deb
Debian10alllibpq-dev< 11.22-0+deb10u1libpq-dev_11.22-0+deb10u1_all.deb
Debian10alllibecpg-compat3< 11.22-0+deb10u1libecpg-compat3_11.22-0+deb10u1_all.deb
Debian10allpostgresql-plpython-11< 11.22-0+deb10u1postgresql-plpython-11_11.22-0+deb10u1_all.deb
Debian10alllibpq5< 11.22-0+deb10u1libpq5_11.22-0+deb10u1_all.deb
Debian10alllibecpg-dev< 11.22-0+deb10u1libecpg-dev_11.22-0+deb10u1_all.deb
Debian10allpostgresql-11< 11.22-0+deb10u1postgresql-11_11.22-0+deb10u1_all.deb
Debian10allpostgresql-pltcl-11< 11.22-0+deb10u1postgresql-pltcl-11_11.22-0+deb10u1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	all	postgresql-doc-11	< 11.22-0+deb10u1	postgresql-doc-11_11.22-0+deb10u1_all.deb
Debian	10	all	libpgtypes3	< 11.22-0+deb10u1	libpgtypes3_11.22-0+deb10u1_all.deb
Debian	10	all	postgresql-plperl-11	< 11.22-0+deb10u1	postgresql-plperl-11_11.22-0+deb10u1_all.deb
Debian	10	all	libpq-dev	< 11.22-0+deb10u1	libpq-dev_11.22-0+deb10u1_all.deb
Debian	10	all	libecpg-compat3	< 11.22-0+deb10u1	libecpg-compat3_11.22-0+deb10u1_all.deb
Debian	10	all	postgresql-plpython-11	< 11.22-0+deb10u1	postgresql-plpython-11_11.22-0+deb10u1_all.deb
Debian	10	all	libpq5	< 11.22-0+deb10u1	libpq5_11.22-0+deb10u1_all.deb
Debian	10	all	libecpg-dev	< 11.22-0+deb10u1	libecpg-dev_11.22-0+deb10u1_all.deb
Debian	10	all	postgresql-11	< 11.22-0+deb10u1	postgresql-11_11.22-0+deb10u1_all.deb
Debian	10	all	postgresql-pltcl-11	< 11.22-0+deb10u1	postgresql-pltcl-11_11.22-0+deb10u1_all.deb

Rows per page:

1-10 of 141