Information on source package postgresql-11

Available versions

ReleaseVersion
buster11.22-0+deb10u3
buster (security)11.22-0+deb10u2

Open issues

BugbusterDescription
CVE-2024-10979vulnerableIncorrect control of environment variables in PostgreSQL PL/Perl allow ...
CVE-2024-10978vulnerableIncorrect privilege assignment in PostgreSQL allows a less-privileged ...
CVE-2024-10977vulnerableClient use of server error message in PostgreSQL allows a server not t ...
CVE-2024-10976vulnerableIncomplete tracking in PostgreSQL of tables with row security allows a ...

Resolved issues

BugDescription
CVE-2024-7348Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in Postgr ...
CVE-2024-4317Missing authorization in PostgreSQL built-in views pg_stats_ext and pg ...
CVE-2024-0985Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in Postg ...
CVE-2023-39418A vulnerability was found in PostgreSQL with the use of the MERGE comm ...
CVE-2023-39417IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in Po ...
CVE-2023-5870A flaw was found in PostgreSQL involving the pg_cancel_backend role th ...
CVE-2023-5869A flaw was found in PostgreSQL that allows authenticated database user ...
CVE-2023-5868A memory disclosure vulnerability was found in PostgreSQL that allows ...
CVE-2023-2455Row security policies disregard user ID changes after inlining; Postgr ...
CVE-2023-2454schema_element defeats protective search_path changes; It was found th ...
CVE-2022-41862In PostgreSQL, a modified, unauthenticated server can send an untermin ...
CVE-2022-2625A vulnerability was found in PostgreSQL. This attack requires permissi ...
CVE-2022-1552A flaw was found in PostgreSQL. There is an issue with incomplete effo ...
CVE-2021-32029A flaw was found in postgresql. Using an UPDATE ... RETURNING command ...
CVE-2021-32028A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO ...
CVE-2021-32027A flaw was found in postgresql in versions before 13.3, before 12.7, b ...
CVE-2021-23222A man-in-the-middle attacker can inject false responses to the client' ...
CVE-2021-23214When the server is configured to use trust authentication with a clien ...
CVE-2021-3677A flaw was found in postgresql. A purpose-crafted query can read arbit ...
CVE-2021-3393An information leak was discovered in postgresql in versions before 13 ...
CVE-2020-25696A flaw was found in the psql interactive terminal of PostgreSQL in ver ...
CVE-2020-25695A flaw was found in PostgreSQL versions before 13.1, before 12.5, befo ...
CVE-2020-25694A flaw was found in PostgreSQL versions before 13.1, before 12.5, befo ...
CVE-2020-21469An issue was discovered in PostgreSQL 12.2 allows attackers to cause a ...
CVE-2020-14350It was found that some PostgreSQL extensions did not use search_path s ...
CVE-2020-14349It was found that PostgreSQL versions before 12.4, before 11.9 and bef ...
CVE-2020-10733The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided ...
CVE-2020-1720A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", whe ...
CVE-2019-10209Postgresql, versions 11.x before 11.5, is vulnerable to a memory discl ...
CVE-2019-10208A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5. ...
CVE-2019-10164PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are ...
CVE-2019-10130A vulnerability was found in PostgreSQL versions 11.x up to excluding ...
CVE-2019-10129A vulnerability was found in postgresql versions 11.x prior to 11.3. U ...
CVE-2019-10128A vulnerability was found in postgresql versions 11.x prior to 11.3. T ...
CVE-2019-10127A vulnerability was found in postgresql versions 11.x prior to 11.3. T ...
CVE-2018-16850postgresql before versions 11.1, 10.6 is vulnerable to a to SQL inject ...

Security announcements

DSA / DLADescription
ELA-1172-1postgresql-11 - security update
DLA-3764-1postgresql-11 - security update
DLA-3651-1postgresql-11 - security update
DLA-3600-1postgresql-11 - security update
DLA-3422-1postgresql-11 - security update
DLA-3316-1postgresql-11 - security update
DLA-3189-1postgresql-11 - bugfix update
DLA-3072-1postgresql-11 - security update
DSA-5135-1postgresql-11 - security update
DSA-5006-1postgresql-11 - security update
DSA-4915-1postgresql-11 - security update
DSA-4623-1postgresql-11 - security update
DSA-4493-1postgresql-11 - security update

Search for package or bug name: Reporting problems