Fedora 32 : 1:rubygem-activerecord (2021-def0e32233)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-def0e32233 advisory. - The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service REDoS vulnerability...

MGASA-2021-0121 Updated postgresql packages fix security vulnerabilities

A user having an UPDATE privilege on a partitioned table but lacking the SELECT privilege on some column may be able to acquire denied-column values from an error message CVE-2021-3393. A user having a SELECT privilege on an individual column can craft a special query that returns all columns of...

Updated postgresql packages fix security vulnerabilities

A user having an UPDATE privilege on a partitioned table but lacking the SELECT privilege on some column may be able to acquire denied-column values from an error message CVE-2021-3393. A user having a SELECT privilege on an individual column can craft a special query that returns all columns of...

NewStart CGSL MAIN 6.02 : libpq Multiple Vulnerabilities (NS-SA-2021-0085)

The remote NewStart CGSL host, running version MAIN 6.02, has libpq packages installed that are affected by multiple vulnerabilities: - A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creat...

EulerOS Virtualization 3.0.2.6 : postgresql (EulerOS-SA-2021-1448)

According to the version of the postgresql package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An...

NewStart CGSL CORE 5.04 / MAIN 5.04 : postgresql-jdbc Vulnerability (NS-SA-2021-0010)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has postgresql-jdbc packages installed that are affected by a vulnerability: - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. CVE-2020-13692 Note that Nessus has not tested for this issue but has instead relied on...

NewStart CGSL MAIN 6.02 : postgresql-jdbc Vulnerability (NS-SA-2021-0087)

The remote NewStart CGSL host, running version MAIN 6.02, has postgresql-jdbc packages installed that are affected by a vulnerability: - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. CVE-2020-13692 Note that Nessus has not tested for this issue but has instead relied only on the...

Huawei EulerOS: Security Advisory for postgresql (EulerOS-SA-2021-1448)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for postgresql (EulerOS-SA-2021-1511)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.6 : postgresql (EulerOS-SA-2021-1511)

According to the version of the postgresql packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. A...

The vulnerability of the PostgreSQL database management system, related to deficiencies in authentication mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PostgreSQL database management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

SUSE-SU-2021:0695-1 Security update for postgresql12

This update for postgresql12 fixes the following issues: Upgrade to version 12.6: - Reindexing might be needed after applying this update. - CVE-2021-3393, bsc1182040: Fix information leakage in constraint-violation error messages...

Regular Expression Denial-of-Service (ReDoS)

activerecord is vulnerable to regular expression denial of service. The insecure regex used to validated the money type of the PostgreSQL adapter results in long periods of processing and allows an attacker to potentially crash the application via a malicious string...

Regular Expression Denial of Service (ReDoS)

Overview activerecord is a library for databases on Rails. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. Carefully crafted input can cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time...

GHSA-8HC4-XXM3-5PPP Active Record subject to Regular Expression Denial-of-Service (ReDoS)

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service REDoS vulnerability. Carefully crafted input can cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time in a regular...

Active Record subject to Regular Expression Denial-of-Service (ReDoS)

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service REDoS vulnerability. Carefully crafted input can cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time in a regular...

Fedora 32 : libpq / postgresql (2021-3db6876545)

The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-3db6876545 advisory. - Update to the latest upstream release. FEDORA-2021-3db6876545 Note that Nessus has not tested for this issue but has instead relied only on the application...

Fedora 33 : libpq / postgresql (2021-3286ac2acc)

The remote Fedora 33 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-3286ac2acc advisory. - Update postgresql and libpq to the new upstream release. FEDORA-2021-3286ac2acc Note that Nessus has not tested for this issue but has instead relied only ...

A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.

...

[SECURITY] Fedora 33 Update: libpq-12.6-1.fc33

The libpq package provides the essential shared library for any PostgreSQL client program or interface. You will need to install this package to use any other PostgreSQL package or any clients that need to connect to a PostgreSQL server...