Advisory ROSA-SA-2021-1955

Software: postgresql 9.2.24 OS: Cobalt 7.9 CVE-ID: CVE-2016-7048 CVE-Crit: HIGH CVE-DESC: The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 may allow remote attackers to execute arbitrary code using HTTP to download software. CVE-STATUS: Default...

openSUSE 15 Security Update : postgresql10 (openSUSE-SU-2021:0894-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0894-1 advisory. - A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certai...

Mail.ru: informations disclosure(Email,Numbers,Agreements, admin Sessions and more ...) through a PostgreSQL database belongs to (legium-back.corp.mail.ru)

Reported a vulnerability in legium.io cloud service, which is not part of Mail.Ru. legium.io is located outside the Mail.Ru infrastructure and does not have access to our company's product data. According to the rules in this case the service refers to Ext.O Third party project. While legium.io...

Important: postgresql

Issue Overview: A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function. CVE-2019-10208 A flaw was found in postgresq...

Amazon Linux 2 : postgresql (ALAS-2021-1665)

The version of postgresql installed on the remote host is prior to 9.2.24-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1665 advisory. A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER...

CVE-2021-20229 affecting package postgresql 12.5-2

CVE-2021-20229 affecting package postgresql 12.5-2. An upgraded version of the package is available that resolves this issue...

CVE-2020-10733 affecting package postgresql 12.1-3

CVE-2020-10733 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-14350 affecting package postgresql 12.1-3

CVE-2020-14350 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-25695 affecting package postgresql 12.1-3

CVE-2020-25695 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2021-32027 affecting package postgresql 12.6-1

CVE-2021-32027 affecting package postgresql 12.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-25694 affecting package postgresql 12.1-3

CVE-2020-25694 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-14349 affecting package postgresql 12.1-3

CVE-2020-14349 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-25696 affecting package postgresql 12.5-1

CVE-2020-25696 affecting package postgresql 12.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2012-4575 affecting package postgresql 12.1-3

CVE-2012-4575 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-1720 affecting package postgresql 12.1-3

CVE-2020-1720 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2021:0894-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: - Upgrade to version 10.17: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. - Don't u...

SUSE-SU-2021:1994-1 Security update for postgresql12

This update for postgresql12 fixes the following issues: Upgrade to version 12.7: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. -...

RHEL 8 : postgresql:10 (RHSA-2021:2361)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2361 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

RHEL 8 : postgresql:9.6 (RHSA-2021:2360)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2360 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

CentOS 8 : postgresql:13 (CESA-2021:2375)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:2375 advisory. - postgresql: Buffer overrun from integer overflow in array subscripting calculations CVE-2021-32027 - postgresql: Memory disclosure in INSERT ... ON...