Most recent entries from all

bdu:2019-01829

Withdrawn: BELL-CVE-2018-1058 — CVE-2018-1058 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-FW42039 — vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row secur…

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.

cnvd-2018-06601

EUVD-2026-183702

fkie_cve-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

GHSA-wj3f-f94q-2r98

gsd-2018-1058

openSUSE-SU-2024:11184-1 — postgresql10-10.18-1.3 on GA media

postgresql10-10.18-1.3 on GA media

RHSA-2018:2511 — Red Hat Security Advisory: rh-postgresql95-postgresql security update

postgresql: Memory disclosure in JSON functions postgresql: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask postgresql: Uncontrolled search path element in pg_dump and other client applications postgresql: Certain host connection parameters defeat client-side security defenses postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements

SUSE-SU-2018:0755-1 — Security update for postgresql94

Security update for postgresql94

UBUNTU-CVE-2018-1058

Affected: Ubuntu:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5, Ubuntu:18.04:LTS: postgresql-10