TI-2018-12060 CVE-2018-16850 · GHSA-h6p9-49w4-8mm8
SQL injection in postgresql
Priority MEDIUM 50
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ...
RHSA-2018:3757
rh-postgresql10-postgresql security update
Released 2018-12-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql10-postgresql-10.6-1.el7, rh-postgresql10-postgresql-contrib-10.6-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.6-1.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-postgresql10-postgresql-10.6-1.el7, rh-postgresql10-postgresql-contrib-10.6-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.6-1.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-postgresql10-postgresql-10.6-1.el7, rh-postgresql10-postgresql-contrib-10.6-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.6-1.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-postgresql10-postgresql-10.6-1.el7, rh-postgresql10-postgresql-contrib-10.6-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.6-1.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql10-postgresql-10.6-1.el7, rh-postgresql10-postgresql-contrib-10.6-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.6-1.el7 +11