Important: postgresql

Issue Overview: A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function. CVE-2019-10208 A flaw was found in postgresq...

Amazon Linux 2 : postgresql (ALAS-2021-1665)

The version of postgresql installed on the remote host is prior to 9.2.24-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1665 advisory. A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER...

CVE-2020-25695 affecting package postgresql 12.1-3

CVE-2020-25695 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2021-20229 affecting package postgresql 12.5-2

CVE-2021-20229 affecting package postgresql 12.5-2. An upgraded version of the package is available that resolves this issue...

CVE-2020-10733 affecting package postgresql 12.1-3

CVE-2020-10733 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-14350 affecting package postgresql 12.1-3

CVE-2020-14350 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-25694 affecting package postgresql 12.1-3

CVE-2020-25694 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2021-32027 affecting package postgresql 12.6-1

CVE-2021-32027 affecting package postgresql 12.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-14349 affecting package postgresql 12.1-3

CVE-2020-14349 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-25696 affecting package postgresql 12.5-1

CVE-2020-25696 affecting package postgresql 12.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2012-4575 affecting package postgresql 12.1-3

CVE-2012-4575 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-1720 affecting package postgresql 12.1-3

CVE-2020-1720 affecting package postgresql 12.1-3. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2021:0894-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: - Upgrade to version 10.17: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. - Don't u...

SUSE-SU-2021:1994-1 Security update for postgresql12

This update for postgresql12 fixes the following issues: Upgrade to version 12.7: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. -...

RHEL 8 : postgresql:10 (RHSA-2021:2361)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2361 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

CentOS 8 : postgresql:12 (CESA-2021:2372)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:2372 advisory. - postgresql: Buffer overrun from integer overflow in array subscripting calculations CVE-2021-32027 - postgresql: Memory disclosure in INSERT ... ON...

CentOS 8 : postgresql:9.6 (CESA-2021:2360)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:2360 advisory. - postgresql: Buffer overrun from integer overflow in array subscripting calculations CVE-2021-32027 - postgresql: Memory disclosure in INSERT ... ON...

RHEL 8 : postgresql:9.6 (RHSA-2021:2360)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2360 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

CentOS 8 : postgresql:13 (CESA-2021:2375)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:2375 advisory. - postgresql: Buffer overrun from integer overflow in array subscripting calculations CVE-2021-32027 - postgresql: Memory disclosure in INSERT ... ON...

RHEL 8 : postgresql:10 (RHSA-2021:2392)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2392 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...