49 matches found
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple High severity CVEs.
Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple High severity CVEs. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-14673 DESCRIPTION:...
CLSA-2026-1792746510 postgresql: Fix of CVE-2026-14673
CVE-2026-14673: run contrib/amcheck's index expressions and predicates with searchpath set to "pgcatalog, pgtemp"...
Rocky Linux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc (ALMALINUX9.6:CLSA-2026:1792746510)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792746510 advisory. - Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the...
AlmaLinux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc (ALMALINUX9.6:CLSA-2026:1792746510)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792746510 advisory. - Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the...
CLSA-2026-1792568604 postgresql: Fix of 7 CVEs
CVE-2026-14663: pgcrypto: propagate cipher initialization errors and add decrypt-only recovery for ciphertexts previously emitted with disabled ciphers - CVE-2026-14666: invalidate role-dependent cached plans after role membership and role attribute changes - CVE-2026-14673: amcheck: clear...
AlmaLinux 9.2 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792568604)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792568604 advisory. - Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty...
CLSA-2026-1792515944 Fix CVE(s): CVE-2026-14673, CVE-2026-19385
SECURITY UPDATE: Out-of-bounds read in pgdump on long protrftypes. dumpFunc parsed pgproc.protrftypes into a fixed FUNCMAXARGS array that is not zero-terminated when the server reports exactly FUNCMAXARGS entries, so the TRANSFORM loop read past the buffer; a function with more entries made pgdum...
ROS-20261002-73-0108
The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...
ROS-20261002-73-0106
The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...
ROS-20261002-73-0104
The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...
ROS-20261002-73-0107
The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...
ROS-20261002-73-0105
The vulnerability of the amcheck extension in the PostgreSQL database management system is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by manipulating the searchpath parameter...
CVE-2026-14673
An untrusted search path vulnerability in PostgreSQL's amcheck module allows a user with EXECUTE privileges to escalate privileges or execute arbitrary code. By setting a malicious search path before invoking an amcheck function, an attacker can hijack execution to run arbitrary SQL functions wit...
PostgreSQL 14.x < 14.24 / 15.x < 15.19 / 16.x < 16.15 / 18.x < 18.6 amcheck Untrusted Search Path
The version of PostgreSQL installed on the remote host is 14 prior to 14.24, 15 prior to 15.19, 16 prior to 16.15, or 18 prior to 18.6. As such, it is potentially affected by a privilege escalation vulnerability: - Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104761)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104761 advisory. Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes...
postgresql: PostgreSQL amcheck: Privilege escalation via untrusted search path
An untrusted search path vulnerability in PostgreSQL's amcheck module allows a user with EXECUTE privileges to escalate privileges or execute arbitrary code. By setting a malicious search path before invoking an amcheck function, an attacker can hijack execution to run arbitrary SQL functions wit...
PostgreSQL amcheck Privilege Escalation
The vulnerability in the amcheck extension of the PostgreSQL database management system is related to the use of an untrusted search path. Exploitation of this vulnerability enables a remote attacker to escalate their privileges and execute arbitrary code by manipulating the searchpath parameter...
BIT-POSTGRESQL-2026-14673 PostgreSQL amcheck does not clear untrusted search path
Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16...
PT-2026-79982
Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16...
