https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:21:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-375482 EUVD-2026-375482 https://cve.radiocsirt.org/vuln/euvd-2026-375482 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61822 <p>pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance() handles exceptions outside the loop that processes rows from part_config, so an exception for one partition set immediately terminates the loop and skips every later set. A role with partman_user access can insert or update a row that reliably fails and assign it a low maintenance_order value so it is processed before legitimate rows. Repeated maintenance ticks then abort before legitimate partition sets are maintained, causing database-wide loss of automated partition maintenance. This issue is fixed in version 5.5.0.</p> <p>pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance() handles exceptions outside the loop that processes rows from part_config, so an exception for one partition set immediately terminates the loop and skips every later set. A role with partman_user access can insert or update a row that reliably fails and assign it a low maintenance_order value so it is processed before legitimate rows. Repeated maintenance ticks then abort before legitimate partition sets are maintained, causing database-wide loss of automated partition maintenance. This issue is fixed in version 5.5.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-61822 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-61822 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pg-partman, Ubuntu:18.04:LTS: pg-partman, Ubuntu:20.04:LTS: pg-partman, Ubuntu:22.04:LTS: pg-partman, Ubuntu:24.04:LTS: pg-partman, Ubuntu:26.04:LTS: pg-partman</p> <p>pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance() handles exceptions outside the loop that processes rows from part_config, so an exception for one partition set immediately terminates the loop and skips every later set. A role with partman_user access can insert or update a row that reliably fails and assign it a low maintenance_order value so it is processed before legitimate rows. Repeated maintenance ticks then abort before legitimate partition sets are maintained, causing database-wide loss of automated partition maintenance. This issue is fixed in version 5.5.0.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pg-partman, Ubuntu:18.04:LTS: pg-partman, Ubuntu:20.04:LTS: pg-partman, Ubuntu:22.04:LTS: pg-partman, Ubuntu:24.04:LTS: pg-partman, Ubuntu:26.04:LTS: pg-partman</p> <p>pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance() handles exceptions outside the loop that processes rows from part_config, so an exception for one partition set immediately terminates the loop and skips every later set. A role with partman_user access can insert or update a row that reliably fails and assign it a low maintenance_order value so it is processed before legitimate rows. Repeated maintenance ticks then abort before legitimate partition sets are maintained, causing database-wide loss of automated partition maintenance. This issue is fixed in version 5.5.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-61822 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2493 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in pg_partman ausnutzen, um einen Denial of Service Angriff durchzuführen, die Autorisierung zu umgehen und SQL-Injection-Angriffe durchzuführen, wodurch er erweiterte Berechtigungen erlangen und beliebige Betriebssystembefehle ausführen kann.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in pg_partman ausnutzen, um einen Denial of Service Angriff durchzuführen, die Autorisierung zu umgehen und SQL-Injection-Angriffe durchzuführen, wodurch er erweiterte Berechtigungen erlangen und beliebige Betriebssystembefehle ausführen kann.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2493