Moderate: Red Hat Security Advisory: rh-postgresql96-postgresql security update

An update for rh-postgresql96-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : postgresql:10 (RHSA-2020:3669)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3669 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

Security Bulletin: PostgreSQL vulnerabilities in IBM Robotic Process Automation with Automation Anywhere

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to attacks involving PostgreSQL. Vulnerability Details CVEID: CVE-2019-10130 DESCRIPTION: PostgreSQL could allow a remote authenticated attacker to bypass security restrictions, caused by improper input validation by th...

SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2019:2012-1)

This update for postgresql10 fixes the following issues : Security issue fixed : CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing bsc1138034. CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Bug fixes: Fo...

PostgreSQL 9.5.x < 9.5.17, 9.6.x < 9.6.13, 10.x < 10.8, 11.x < 11.3 Information Disclosure Vulnerability - Windows

PostgreSQL is prone to an information disclosure vulnerability due to selectivity estimators bypass row security policies. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2019-10130

CVE-2019-10130 affects PostgreSQL where statistics kept for columns can be consulted during query planning before row-level security is enforced, allowing an attacker with SELECT privilege to read the most common values or histograms of certain columns. Affected versions include PostgreSQL 11.x (...

CVE-2019-10130

A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain...

openSUSE: Security Advisory for postgresql10 (openSUSE-SU-2019:1773-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : postgresql10 (openSUSE-2019-1773)

This update for postgresql10 fixes the following issues : Security issue fixed : - CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing bsc1138034. - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Bug fixes...

SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2019:1810-1)

This update for postgresql10 fixes the following issues : Security issue fixed : CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing bsc1138034. CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Bug fixes: Fo...

openSUSE Security Update : postgresql96 (openSUSE-2019-1668)

This update for postgresql96 fixes the following issues : Security issue fixed : - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable...

openSUSE: Security Advisory for postgresql96 (openSUSE-SU-2019:1668-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for postgresql96 (moderate)

openSUSE Security Update: Security update for postgresql96 Announcement ID: openSUSE-SU-2019:1668-1 Rating: moderate References: 1134689 Cross-References: CVE-2019-10130 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...

SUSE SLED12 / SLES12 Security Update : postgresql96 (SUSE-SU-2019:1687-1)

This update for postgresql96 fixes the following issues : Security issue fixed : CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE-SU-2019:1687-1 Security update for postgresql96

This update for postgresql96 fixes the following issues: Security issue fixed: - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689...

openSUSE Security Update : postgresql10 (openSUSE-2019-1578)

This update for postgresql10 fixes the following issues : Security issue fixed : - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Bug fixes : - For a complete list of fixes check the release notes. -...

Security update for postgresql10 (moderate)

openSUSE Security Update: Security update for postgresql10 Announcement ID: openSUSE-SU-2019:1578-1 Rating: moderate References: 1134689 Cross-References: CVE-2019-10130 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...

SUSE SLED12 / SLES12 Security Update : postgresql10 (SUSE-SU-2019:1511-1)

This update for postgresql10 fixes the following issues : Security issue fixed : CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Bug fixes: For a complete list of fixes check the release notes. -...

SUSE-SU-2019:1511-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Bug fixes: - For a complete list of fixes check the release notes...

MGASA-2019-0189 Updated postgresql packages fix security vulnerabilities

Updated postgresql packages fix security vulnerabilities CVE-2019-10129: Memory disclosure in partition routing Prior to this release, a user running PostgreSQL 11 can read arbitrary bytes of server memory by executing a purpose-crafted INSERT statement to a partitioned table. CVE-2019-10130:...