Most recent entries from all

ALSA-2021:2372 — Important: postgresql:12 security update

Affected: AlmaLinux:8: postgres-decoderbufs

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (12.7)

Security Fix(es):

* postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)

* postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028)

* postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029)

* postgresql: Partition constraint violation errors leak values of denied columns (CVE-2021-3393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2021-02774

Withdrawn: BELL-CVE-2021-32029 — CVE-2021-32029 does not affect BellSoft software

Withdrawn by the publisher.

BIT-postgresql-2021-32029

Affected: Bitnami: postgresql

A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.

certfr-2021-avi-381 — De multiples vulnérabilités ont été découvertes dans PostgreSQL. Elles permettent à un attaquant de provoquer une attei…

certfr-2021-avi-381

Withdrawn: CLEANSTART-2026-FW42039 — vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row secur…

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.

EUVD-2026-27907

fkie_cve-2021-32029

GHSA-f47v-jjrp-x56x

gsd-2021-32029

openSUSE-SU-2021:1785-1 — Security update for postgresql13

Security update for postgresql13

RHSA-2021:2389 — Red Hat Security Advisory: postgresql:12 security update

postgresql: Partition constraint violation errors leak values of denied columns postgresql: Buffer overrun from integer overflow in array subscripting calculations postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING

SUSE-SU-2021:1783-1 — Security update for postgresql12

Security update for postgresql12

UBUNTU-CVE-2021-32029

Affected: Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:20.04:LTS: postgresql-12

WID-SEC-W-2022-1241 — PostgreSQL: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen und um Informationen offenzulegen.