postgresql security update

9.2.24-8 - Resolves: CVE-2022-1552 - Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b...

Scientific Linux Security Update : postgresql on SL7.x i686/x86_64 (2022:5162)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:5162-1 advisory. - postgresql: Autovacuum, REINDEX, and others omit security restricted operation sandbox CVE-2022-1552 Note that Nessus has not tested for this issue but...

RHEL 7 : postgresql (RHSA-2022:5162)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5162 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Autovacuum, REINDEX, and others omit securit...

Malicious code in azuredatastudio-postgresql (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8b8d29811e035d2afc35035c07f7b2758a20d3a3d52dc55773e1ba084a2a552 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1396 Malicious code in azuredatastudio-postgresql (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8b8d29811e035d2afc35035c07f7b2758a20d3a3d52dc55773e1ba084a2a552 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-postgresql-flexible-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c67780d0043880a352f0f1137b729e497fa946b957fae4ca0f72384df954fa8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1269 Malicious code in azure-arm-postgresql-flexible-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c67780d0043880a352f0f1137b729e497fa946b957fae4ca0f72384df954fa8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cervantes - Collaborative Platform For Pentesters Or Red Teams Who Want To Save Time To Manage Their Projects, Clients, Vulnerabilities And Reports In One Place

Cervantes is an opensource collaborative platform for pentesters or red teams who want to save time to manage their projects, clients, vulnerabilities and reports in one place. Features OpenSource Multiplatform Multilanguage Team Collaboration BuiltIn dashbaords and analytics Manage your clients...

npm pg-native 代码问题漏洞

npm pg-native is a high-performance native binding between node.js and PostgreSQL from US-based npm, using a simple API via libpq. A code issue vulnerability exists in pg-native that stems from the plugin's susceptibility to a denial of service DoS when it attempts to convert the second parameter...

npm libpq 后置链接漏洞

npm libpq is a node-native binding to the PostgreSQL libpq C client library from npm USA. A backlink vulnerability exists in versions of libpq prior to 1.7.1, which stems from the fact that Read calls to g GitArtifactReader.readFromRepository do not check for files containing trigger resource...

DEBIAN-CVE-2022-31625

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or...

Security Bulletin: Vulnerability in PostgreSQL may affect IBM Spectrum Copy Data Management

Summary PostgreSQL could allow a remote attacker to gain unauthorized access to the system which may affect IBM Spectrum Copy Data Management. Vulnerability Details IBM X-Force ID: 220313 DESCRIPTION: PostgreSQL JDBC Driver could allow a remote attacker to gain unauthorized access to the system,...

IBM Spectrum Copy Data Management Information Disclosure Vulnerability (CNVD-2022-51662)

IBM Spectrum Copy Data Management, an IBM company that modernizes, simplifies and automates data center copy management processes, is vulnerable to an information disclosure vulnerability that stems from a lack of protection for sensitive information and could be exploited by attackers to The...

CVE-2022-31769

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system. IBM X-Force ID: 228219...

CVE-2022-31769

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system. IBM X-Force ID: 228219...

Code injection

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system. IBM X-Force ID: 228219...

CVE-2022-31769

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system. IBM X-Force ID: 228219...

CVE-2022-31769

Summary (concrete details available): IBM Spectrum Copy Data Management versions 2.2.0.0–2.2.15.0 are affected by an information disclosure vulnerability that could allow a remote attacker to view product configuration information stored in PostgreSQL. Root cause per sources is lack of protection...

OESA-2022-1706 libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or...

IBM Spectrum Copy Data Management 信息泄露漏洞

IBM Spectrum Copy Data Management, an IBM company that modernizes, simplifies and automates data center copy management processes, is vulnerable to an information disclosure vulnerability that stems from a lack of protection for sensitive information and could be exploited by attackers to The...