TI-2018-00978 CVE-2018-1058 · GHSA-wj3f-f94q-2r98
Improper input validation in postgresql
Priority MEDIUM 53
A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users.
RHSA-2018:3816
CloudForms 4.6.6 security, bug fix and enhancement update
Released 2018-12-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- CloudForms Management Engine 5.9 cfme-5.9.6.5-3.el7cf, cfme-amazon-smartstate-5.9.6.5-2.el7cf, cfme-appliance-5.9.6.5-1.el7cf +15
Fixes 4 records
TI-2018-07727 CVE-2018-10915 · GHSA-q7vw-gjh3-qf97
Information disclosure in postgresql
Priority MEDIUM 45
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections.
TI-2018-07737 CVE-2018-10925 · GHSA-mr45-mwhc-fw72
Incorrect authorization in postgresql
Priority MEDIUM 40
It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ...
TI-2018-00974 CVE-2018-1053 · GHSA-h73g-3m4r-j2cr
Incorrect permission assignment in postgresql
Priority LOW 31
In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_dumpall -g` under um…