TI-2018-00978 CVE-2018-1058 · GHSA-wj3f-f94q-2r98
Improper input validation in postgresql
Priority MEDIUM 53
A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users.
RHSA-2018:2511
rh-postgresql95-postgresql security update
Released 2018-08-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-postgresql95-postgresql-9.5.14-1.el6, rh-postgresql95-postgresql-contrib-9.5.14-1.el6, rh-postgresql95-postgresql-devel-9.5.14-1.el6 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql95-postgresql-9.5.14-1.el7, rh-postgresql95-postgresql-contrib-9.5.14-1.el7, rh-postgresql95-postgresql-devel-9.5.14-1.el7 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-postgresql95-postgresql-9.5.14-1.el6, rh-postgresql95-postgresql-contrib-9.5.14-1.el6, rh-postgresql95-postgresql-devel-9.5.14-1.el6 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-postgresql95-postgresql-9.5.14-1.el7, rh-postgresql95-postgresql-contrib-9.5.14-1.el7, rh-postgresql95-postgresql-devel-9.5.14-1.el7 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-postgresql95-postgresql-9.5.14-1.el7, rh-postgresql95-postgresql-contrib-9.5.14-1.el7, rh-postgresql95-postgresql-devel-9.5.14-1.el7 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-postgresql95-postgresql-9.5.14-1.el7, rh-postgresql95-postgresql-contrib-9.5.14-1.el7, rh-postgresql95-postgresql-devel-9.5.14-1.el7 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-postgresql95-postgresql-9.5.14-1.el6, rh-postgresql95-postgresql-contrib-9.5.14-1.el6, rh-postgresql95-postgresql-devel-9.5.14-1.el6 +8
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql95-postgresql-9.5.14-1.el7, rh-postgresql95-postgresql-contrib-9.5.14-1.el7, rh-postgresql95-postgresql-devel-9.5.14-1.el7 +8
Fixes 6 records
TI-2018-07727 CVE-2018-10915 · GHSA-q7vw-gjh3-qf97
Information disclosure in postgresql
Priority MEDIUM 45
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections.
TI-2017-11072 CVE-2017-15098 · GHSA-4r9v-fq66-c5gx
Information disclosure in Red Hat postgresql
Priority MEDIUM 42
Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or dis…
TI-2018-07737 CVE-2018-10925 · GHSA-mr45-mwhc-fw72
Incorrect authorization in postgresql
Priority MEDIUM 40
It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ...
TI-2017-11073 CVE-2017-15099 · GHSA-pcph-v7q2-77cx
Information disclosure in Red Hat postgresql
Priority LOW 38
INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read.
TI-2018-00974 CVE-2018-1053 · GHSA-h73g-3m4r-j2cr
Incorrect permission assignment in postgresql
Priority LOW 31
In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_dumpall -g` under um…