Most recent entries from all

bdu:2019-04242

Withdrawn: BELL-CVE-2018-1115 — CVE-2018-1115 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-QI27465 — Security fixes in postgresql 10.4-r0

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Package postgresql version 10.4-r0 fixes 1 vulnerabilities: CVE-2018-1115

cnvd-2018-13765

EUVD-2026-61067

fkie_cve-2018-1115

postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.

GHSA-54w7-jv4g-qhqg

gsd-2018-1115

openSUSE-SU-2020:1227-1 — Security update for postgresql96, postgresql10 and postgresql12

Security update for postgresql96, postgresql10 and postgresql12

RHSA-2018:2565 — Red Hat Security Advisory: rh-postgresql10-postgresql security update

postgresql: Too-permissive access control list on function pg_logfile_rotate() postgresql: Certain host connection parameters defeat client-side security defenses postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements

SUSE-SU-2018:1695-1 — Security update for postgresql96

Security update for postgresql96

UBUNTU-CVE-2018-1115

Affected: Ubuntu:18.04:LTS: postgresql-10