CVE-2026-120143

Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a cursor over a transition table. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-120143

A use-after-free vulnerability exists in PostgreSQL trigger functions, where a cursor over a transition table can be exploited to execute arbitrary code as the operating system user running the database. The issue is caused by improper lifecycle management of portals, which are fixed by forcibly ...

EUVD-2026-124519

Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a cursor over a transition table. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-120143

Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a cursor over a transition table. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-116312

PostgreSQL versions 15 through 18 are affected by a vulnerability where an inconsistent transition-capture state in the MERGE command can lead to incorrect behavior. Specifically, a table data modifier can cause an AFTER trigger to process the wrong new row when performing a MERGE on a partitione...

CVE-2026-116312 PostgreSQL MERGE can place the wrong row in a trigger transition table

Inconsistent transition-capture state in PostgreSQL MERGE allows a table data modifier to make an AFTER trigger process the wrong new row, via a partitioned table MERGE that performs an INSERT before an UPDATE. Within major versions 15-18, minor versions before PostgreSQL 18.7, 17.12, 16.16, and...

CVE-2026-120143: n/a PostgreSQL: Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating…

Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a cursor over a transition table. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

Vulnerability in core server (CVE-2026-116312)

PostgreSQL MERGE can place the wrong row in a trigger transition table Inconsistent transition-capture state in PostgreSQL MERGE allows a table data modifier to make an AFTER trigger process the wrong new row, via a partitioned table MERGE that performs an INSERT before an UPDATE. Within major...

Vulnerability in core server (CVE-2026-120143)

PostgreSQL transition-table cursor use-after-free executes arbitrary code Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a cursor over a transition table. Versions before PostgreSQL 18.7,...

PT-2026-145829

Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a cursor over a transition table. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2021-47441 mlxsw: thermal: Fix out-of-bounds memory accesses

In the Linux kernel, the following vulnerability has been resolved: mlxsw: thermal: Fix out-of-bounds memory accesses Currently, mlxsw allows cooling states to be set above the maximum cooling state supported by the driver: cat /sys/class/thermal/thermalzone2/cdev0/type mlxswfan cat...

CVE-2021-47441

The Linux kernel contains a vulnerability in the mlxsw driver where it fails to reject cooling states set above the maximum supported value. When CONFIG_THERMAL_STATISTICS=y is enabled, providing an out-of-bounds index (e.g., setting a state of 18 when the maximum is 10) results in out-of-bounds ...

CVE-2023-52614 PM / devfreq: Fix buffer overflow in trans_stat_show

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in transstatshow Fix buffer overflow in transstatshow. Convert simple snprintf to the more secure scnprintf with size of PAGESIZE. Add condition checking if we are exceeding PAGESIZE and exit ear...

Security update for postgresql10

This update for postgresql10 fixes the following issues: Security issue fixed: CVE-2018-16850: Fixed improper quoting of transition table names when pgdump emits CREATE TRIGGER could have caused privilege escalation bsc1114837. Non-security issues fixed: Update to release 10.6:...

SUSE-SU-2018:3770-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2018-16850: Fixed improper quoting of transition table names when pgdump emits CREATE TRIGGER could have caused privilege escalation bsc1114837. Non-security issues fixed: - Update to release 10.6:...