CBL Mariner 2.0 Security Update: postgresql (CVE-2024-10978)

The version of postgresql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10978 advisory. - Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change...

CVE-2023-5870 affecting package postgresql for versions less than 14.14-1

CVE-2023-5870 affecting package postgresql for versions less than 14.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-10979 affecting package postgresql for versions less than 14.14-1

CVE-2024-10979 affecting package postgresql for versions less than 14.14-1. A patched version of the package is available...

CVE-2024-10976 affecting package postgresql for versions less than 14.14-1

CVE-2024-10976 affecting package postgresql for versions less than 14.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-10978 affecting package postgresql for versions less than 14.14-1

CVE-2024-10978 affecting package postgresql for versions less than 14.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-10977 affecting package postgresql for versions less than 14.14-1

CVE-2024-10977 affecting package postgresql for versions less than 14.14-1. An upgraded version of the package is available that resolves this issue...

OESA-2024-2468 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

OESA-2024-2467 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

OESA-2024-2466 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

OESA-2024-2430 libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or...

OESA-2024-2427 libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or...

[SECURITY] [DLA 3954-2] postgresql-13 - regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3954-2 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 21, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5812-2] postgresql-15 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5812-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 21, 2024 https://www.debian.org/security/faq -...

DLA-3954-2 postgresql-13 - regression update

Bulletin has no description...

DSA-5812-2 postgresql-15 - regression update

Bulletin has no description...

Versa Networks Versa Director insecure default PostgreSQL configuration

RISK EVALUATION Versa Networks Versa Director, by default, configures PostgreSQL to listen on all network interfaces using database credentials shared by multiple installations. From Advising Vulnerability In Versa Director: "This combination allows an unauthenticated attacker to access and...

PostgreSQL 12.x < 12.21 / 13.x < 13.17 / 14.x < 14.14 / 15.x < 15.9 / 16.x < 16.5 / 17.x < 17.1 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 12 prior to 12.21, 13 prior to 13.17, 14 prior to 14.14, 15 prior to 15.9, 16 prior to 16.5, or 17 prior to 17.1. As such, it is potentially affected by multiple vulnerabilities : - Incorrect control of environment variables in PostgreSQL...

CVE-2024-42450

The Versa Director uses PostgreSQL Postgres to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres t...

CVE-2024-42450

The Versa Director uses PostgreSQL Postgres to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres t...

CVE-2024-42450

The Versa Director uses PostgreSQL Postgres to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres t...