openSUSE 15 Security Update : postgresql10 (openSUSE-SU-2021:1970-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1970-1 advisory. - A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certai...

PostgreSQL Command Injection Vulnerability

PostgreSQL is a free object-relational database management system from the Postgresql organization. The system supports most SQL standards and provides many other features such as foreign keys, triggers, views, etc. A security vulnerability exists in PostgreSQL, which stems from the fact that a...

Important: postgresql96

Issue Overview: A flaw was found in postgresql. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

Important: postgresql92

Issue Overview: A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function. CVE-2019-10208 A flaw was found in postgresq...

SUSE-SU-2021:1785-2 Security update for postgresql13

This update for postgresql13 fixes the following issues: - Upgrade to version 13.3: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. -...

OPENSUSE-SU-2021:1970-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: - Upgrade to version 10.17: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. - Don't u...

OPENSUSE-SU-2021:1994-1 Security update for postgresql12

This update for postgresql12 fixes the following issues: Upgrade to version 12.7: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. -...

Advisory ROSA-SA-2021-1955

Software: postgresql 9.2.24 OS: Cobalt 7.9 CVE-ID: CVE-2016-7048 CVE-Crit: HIGH CVE-DESC: The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 may allow remote attackers to execute arbitrary code using HTTP to download software. CVE-STATUS: Default...

openSUSE 15 Security Update : postgresql10 (openSUSE-SU-2021:0894-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0894-1 advisory. - A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certai...

Mail.ru: informations disclosure(Email,Numbers,Agreements, admin Sessions and more ...) through a PostgreSQL database belongs to (legium-back.corp.mail.ru)

Reported a vulnerability in legium.io cloud service, which is not part of Mail.Ru. legium.io is located outside the Mail.Ru infrastructure and does not have access to our company's product data. According to the rules in this case the service refers to Ext.O Third party project. While legium.io...

Important: postgresql

Issue Overview: A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function. CVE-2019-10208 A flaw was found in postgresq...

Amazon Linux 2 : postgresql (ALAS-2021-1665)

The version of postgresql installed on the remote host is prior to 9.2.24-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1665 advisory. A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER...

CVE-2020-14350 affecting package postgresql 12.1-3

CVE-2020-14350 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-25695 affecting package postgresql 12.1-3

CVE-2020-25695 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-10733 affecting package postgresql 12.1-3

CVE-2020-10733 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2021-20229 affecting package postgresql 12.5-2

CVE-2021-20229 affecting package postgresql 12.5-2. An upgraded version of the package is available that resolves this issue...

CVE-2020-14349 affecting package postgresql 12.1-3

CVE-2020-14349 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2021-32027 affecting package postgresql 12.6-1

CVE-2021-32027 affecting package postgresql 12.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-25694 affecting package postgresql 12.1-3

CVE-2020-25694 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-25696 affecting package postgresql 12.5-1

CVE-2020-25696 affecting package postgresql 12.5-1. An upgraded version of the package is available that resolves this issue...