dev-db/postgresql-9999 — Security Advisories

▸ GLSA 202608-15 PostgreSQL: Multiple Vulnerabilities version not in range high local and remote 2026-08-17

Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in arbitrary code execution.

Announced: 2026-08-17
Revised: 2026-08-17
Access: local and remote
Bugs: #949747 #955658 #961496 #966064 #969976 #974982
Advisory: https://security.gentoo.org/glsa/202608-15

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 14.23-r1:14, < 15.18-r1:15, < 16.14-r1:16, < 17.10:17, < 18.4:18	>= 14.23-r1:14, >= 15.18-r1:15, >= 16.14-r1:16, >= 17.10:17, >= 18.4:18

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 14 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-14.23-r1:14"

All PostgreSQL 15 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-15.18-r1:15"

All PostgreSQL 16 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-16.14-r1:16"

All PostgreSQL 17 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-17.10:17"

All PostgreSQL 18 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-18.4:18"

References

▸ GLSA 202412-12 PostgreSQL: Multiple Vulnerabilities version not in range high remote 2024-12-08

Multiple vulnerabilities have been discovered in PostgreSQL, the worst of which could lead to arbitrary code execution.

Announced: 2024-12-08
Revised: 2024-12-08
Access: remote
Bugs: #943512
Advisory: https://security.gentoo.org/glsa/202412-12

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 12.21:12, < 13.17:13, < 14.14:14, < 15.9:15, < 16.5:16, < 17.1:17	>= 12.21:12, >= 13.17:13, >= 14.14:14, >= 15.9:15, >= 16.5:16, >= 17.1:17

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-12.21:12"
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-13.17:13"
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-14.14:14"
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-15.9:15"
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-16.5:16"
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-17.1:17"

References

▸ GLSA 202409-02 PostgreSQL: Privilege Escalation version not in range high local and remote 2024-09-22

A vulnerability has been discovered in PostgreSQL, which can lead to privilege escalation.

Announced: 2024-09-22
Revised: 2024-09-22
Access: local and remote
Bugs: #937573
Advisory: https://security.gentoo.org/glsa/202409-02

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 12.20:12, < 13.16:13, < 14.13:14, < 15.8:15, < 16.4:16	>= 12.20:12, >= 13.16:13, >= 14.13:14, >= 15.8:15, >= 16.4:16

Background

PostgreSQL is an open source object-relational database management system.

Description

A vulnerability has been discovered in PostgreSQL. Please review the CVE identifier referenced below for details.

Impact

An attacker able to create and drop non-temporary objects could inject SQL code that would be executed by a concurrent pg_dump session with the privileges of the role running pg_dump (which is often a superuser). The attack involves replacing a sequence or similar object with a view or foreign table that will execute malicious code. To prevent this, introduce a new server parameter restrict_nonsystem_relation_kind that can disable expansion of non-builtin views as well as access to foreign tables, and teach pg_dump to set it when available. Note that the attack is prevented only if both pg_dump and the server it is dumping from are new enough to have this fix.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-12.20:12"
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-13.16:13"
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-14.13:14"
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-15.8:15"
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-16.4:16"

References

CVE-2024-7348

▸ GLSA 202408-06 PostgreSQL: Multiple Vulnerabilities version not in range normal local 2024-08-07

Multiple vulnerabilities have been discovered in PostgreSQL, the worst of which could lead to privilege escalation or denial of service.

Announced: 2024-08-07
Revised: 2024-08-07
Access: local
Bugs: #903193 #912251 #917153 #924110 #931849
Advisory: https://security.gentoo.org/glsa/202408-06

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 12, < 12.19:12, < 13.14:13, < 14.12-r1:14, < 15.7-r1:15, < 16.3-r1:16	>= 12.19:12, >= 13.14:13, >= 14.12-r1:14, >= 15.7-r1:15, >= 16.3-r1:16

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-16.3-r1:16"

Or update an older slot if that is still in use.

References

▸ GLSA 202211-04 PostgreSQL: Multiple Vulnerabilities this version unaffected high remote 2022-11-19

Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in remote code execution.

Announced: 2022-11-19
Revised: 2022-11-19
Access: remote
Bugs: #793734 #808984 #823125 #865255
Advisory: https://security.gentoo.org/glsa/202211-04

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 14.5:14, < 13.8:13, < 12.12:12, < 11.17:11, < 10.22	>= 14.5, >= 13.8:13, >= 12.12:12, >= 11.17:11, >= 10.22:10

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 10.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-10.22:10"

All PostgreSQL 11.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-11.17:11"

All PostgreSQL 12.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-12.12:12"

All PostgreSQL 13.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-13.8:13"

All PostgreSQL 14.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-14.5:14"

References

▸ GLSA 202105-32 PostgreSQL: Multiple vulnerabilities version not in range low local, remote 2021-05-26

Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in information disclosure.

Announced: 2021-05-26
Revised: 2021-05-26
Access: local, remote
Bugs: #771942
Advisory: https://security.gentoo.org/glsa/202105-32

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 13.2	>= 9.5.25:9.5, >= 9.6.21:9.6, >= 10.16:10, >= 11.11:11, >= 12.6:12, >= 13.2:13

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

An authenticated remote attacker, by executing malicious crafted queries, could possibly disclose sensitive information.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 9.5.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.5.25:9.5"

All PostgreSQL 9.6.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.6.21:9.6"

All PostgreSQL 10.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-10.16:10"

All PostgreSQL 11.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-11.11:11"

All PostgreSQL 12.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-12.6:12"

All PostgreSQL 13.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-13.2:13"

References

▸ GLSA 202012-07 PostgreSQL: Multiple vulnerabilities version not in range normal local, remote 2020-12-07

Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in arbitrary code execution.

Announced: 2020-12-07
Revised: 2020-12-07
Access: local, remote
Bugs: #754363
Advisory: https://security.gentoo.org/glsa/202012-07

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 13.1	>= 9.5.24:9.5, >= 9.6.20:9.6, >= 10.15:10, >= 11.10:11, >= 12.5:12, >= 13.1:13

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly obtain sensitive information, alter SQL commands, escape PostgreSQL sandbox or execute arbitrary code with the privileges of the process.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 9.5.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.5.24:9.5"

All PostgreSQL 9.6.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.6.20:9.6"

All PostgreSQL 10.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-10.15:10"

All PostgreSQL 11.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-11.10:11"

All PostgreSQL 12.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-12.5:12"

All PostgreSQL 13.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-13.1:13"

References

▸ GLSA 202008-13 PostgreSQL: Multiple vulnerabilities version not in range normal remote 2020-08-26

Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in privilege escalation.

Announced: 2020-08-26
Revised: 2020-08-26
Access: remote
Bugs: #737032
Advisory: https://security.gentoo.org/glsa/202008-13

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 9.5.23:9.5, < 9.6.19:9.6, < 10.14:10, < 11.9:11, < 12.4:12	>= 9.5.23:9.5, >= 9.6.19:9.6, >= 10.14:10, >= 11.9:11, >= 12.4:12

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 9.5 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.5.23:9.5"

All PostgreSQL 9.6 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.6.19:9.6"

All PostgreSQL 10 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-10.14:10"

All PostgreSQL 11 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-11.9:11"

All PostgreSQL 12 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-12.4:12"

References

▸ GLSA 202003-03 PostgreSQL: Multiple vulnerabilities version not in range normal local, remote 2020-03-12

Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in the execution of arbitrary code.

Announced: 2020-03-12
Revised: 2020-03-12 (revision 2)
Access: local, remote
Bugs: #685846 #688420 #709708
Advisory: https://security.gentoo.org/glsa/202003-03

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 9.4.26:9.4, < 9.5.21:9.5, < 9.6.17:9.6, < 10.12:10, < 11.7:11, < 12.2:12	>= 9.4.26:9.4, >= 9.5.21:9.5, >= 9.6.17:9.6, >= 10.12:10, >= 11.7:11, >= 12.2:12

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, bypass certain client-side connection security features, read arbitrary server memory, alter certain data or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 9.4.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.4.26:9.4"

All PostgreSQL 9.5.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.5.21:9.5"

All PostgreSQL 9.6.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.6.17:9.6"

All PostgreSQL 10.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-10.12:10"

All PostgreSQL 11.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-11.7:11"

All PostgreSQL 12.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-12.2:12"

References

▸ GLSA 201811-24 PostgreSQL: SQL injection version not in range normal remote 2018-11-30

A SQL injection in PostgreSQL may allow attackers to execute arbitrary SQL statements.

Announced: 2018-11-30
Revised: 2018-12-03 (revision 2)
Access: remote
Bugs: #670724
Advisory: https://security.gentoo.org/glsa/201811-24

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 9.3.25:9.3, < 9.4.20:9.4, < 9.5.15:9.5, < 9.6.11:9.6, < 10.6:10, < 11.1:11	>= 9.3.25:9.3, >= 9.4.20:9.4, >= 9.5.15:9.5, >= 9.6.11:9.6, >= 10.6:10, >= 11.1:11

Background

PostgreSQL is an open source object-relational database management system.

Description

A vulnerability was discovered in PostgreSQL’s pg_upgrade and pg_dump.

Impact

An attacker, by enticing a user to process a specially crafted trigger definition, can execute arbitrary SQL statements with superuser privileges.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 9.3.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.3.25"

All PostgreSQL 9.4.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.4.20"

All PostgreSQL 9.5.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.5.15"

All PostgreSQL 9.6.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.6.11"

All PostgreSQL 10.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-10.6"

All PostgreSQL 11.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-11.1"

References

CVE-2018-16850

▸ GLSA 201810-08 PostgreSQL: Multiple vulnerabilities version not in range high local, remote 2018-10-30

Multiple vulnerabilities have been found in PostgreSQL, the worst which could lead to privilege escalation.

Announced: 2018-10-30
Revised: 2018-10-30
Access: local, remote
Bugs: #603716 #603720 #664332
Advisory: https://security.gentoo.org/glsa/201810-08

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 10.5	>= 9.3.24:9.3, >= 9.4.19:9.4, >= 9.5.14:9.5, >= 9.6.10:9.6, >= 10.5:10

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the referenced CVE identifiers for details.

In addition it was discovered that Gentoo’s PostgreSQL installation suffered from a privilege escalation vulnerability due to a runscript which called OpenRC’s checkpath() on a user controlled path and allowed user running PostgreSQL to kill arbitrary processes via PID file manipulation.

Impact

A remote attacker could bypass certain client-side connection security features, read arbitrary server memory or alter certain data.

In addition, a local attacker could gain privileges or cause a Denial of Service condition by killing arbitrary processes.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL users up to 9.3 should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.3.24:9.3"

All PostgreSQL 9.4 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.4.19:9.4"

All PostgreSQL 9.5 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.5.14:9.5"

All PostgreSQL 9.6 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.6.10:9.6"

All PostgreSQL 10 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-10.5:10"

References

▸ GLSA 201710-06 PostgreSQL: Multiple vulnerabilities version not in range normal remote 2017-10-08

Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in privilege escalation.

Announced: 2017-10-08
Revised: 2017-10-08
Access: remote
Bugs: #618462 #627462
Advisory: https://security.gentoo.org/glsa/201710-06

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 9.6.4	>= 9.6.4:9.6, >= 9.5.8:9.5, >= 9.4.13:9.4, >= 9.3.18:9.3, >= 9.2.22:9.2

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the referenced CVE identifiers for details.

Impact

A remote attacker could escalate privileges, cause a Denial of Service condition, obtain passwords, cause a loss in information, or obtain sensitive information.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 9.6.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.6.4"

All PostgreSQL 9.5.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.5.8"

All PostgreSQL 9.4.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.4.13"

All PostgreSQL 9.3.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.3.18"

All PostgreSQL 9.2.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.2.22"

References

▸ GLSA 201701-33 PostgreSQL: Multiple vulnerabilities version not in range normal remote 2017-01-12

Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in execution of arbitrary code or privilege escalation.

Announced: 2017-01-12
Revised: 2017-01-12 (revision 4)
Access: remote
Bugs: #562586 #574456 #602130
Advisory: https://security.gentoo.org/glsa/201701-33

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 9.5.4	>= 9.5.4:9.5, >= 9.4.9:9.4, >= 9.3.14:9.3, >= 9.2.18:9.2, >= 9.1.23:9.1

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, or escalate privileges.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 9.5.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.5.4:9.5"

All PostgreSQL 9.4.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">dev-db/postgresql-9.4.9:9.4"

All PostgreSQL 9.3.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">dev-db/postgresql-9.3.14:9.3"

All PostgreSQL 9.2.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">dev-db/postgresql-9.2.18:9.2"

All PostgreSQL 9.1.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">dev-db/postgresql-9.1.23:9.1"

References

▸ GLSA 201507-20 PostgreSQL: Multiple vulnerabilities this version unaffected normal remote 2015-07-18

Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in execution of arbitrary code or privilege escalation.

Announced: 2015-07-18
Revised: 2017-01-03 (revision 3)
Access: remote
Bugs: #539018 #550172
Advisory: https://security.gentoo.org/glsa/201507-20

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 9.4.3	>= 9.0.21 (revision), >= 9.1.17 (revision), >= 9.2.12 (revision), >= 9.3.8 (revision), >= 9.4.3, >= 9.0.22 (revision), >= 9.0.23 (revision), >= 9.0.24 (revision), >= 9.1.18 (revision), >= 9.1.19 (revision), >= 9.1.20 (revision), >= 9.2.13 (revision), >= 9.2.14 (revision), >= 9.2.15 (revision), >= 9.3.9 (revision), >= 9.3.10 (revision), >= 9.3.11 (revision), >= 9.3.12 (revision), >= 9.3.14 (revision), >= 9.3.15 (revision)

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition or escalate privileges.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 9.0.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.0.21"

All PostgreSQL 9.1.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.1.17"

All PostgreSQL 9.2.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.2.12"

All PostgreSQL 9.3.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.3.8"

All PostgreSQL 9.4.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/postgresql-9.4.3"

References

▸ GLSA 201110-22 PostgreSQL: Multiple vulnerabilities version not in range normal remote 2011-10-25

Multiple vulnerabilities in the PostgreSQL server and client allow remote attacker to conduct several attacks, including the execution of arbitrary code and Denial of Service.

Announced: 2011-10-25
Revised: 2012-03-05 (revision 3)
Access: remote
Bugs: #261223 #284274 #297383 #308063 #313335 #320967 #339935 #353387 #384539
Advisory: https://security.gentoo.org/glsa/201110-22

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	<= 9	—
dev-db/postgresql-base	*	< 9.0.5	>= 9.0.5, >= 8.4.9 (revision), >= 8.3.16 (revision), >= 8.2.22 (revision), >= 8.4.10 (revision), >= 8.3.17 (revision), >= 8.2.23 (revision), >= 8.4.11, >= 8.3.18
dev-db/postgresql-server	*	< 9.0.5	>= 9.0.5, >= 8.4.9 (revision), >= 8.3.16 (revision), >= 8.2.22 (revision), >= 8.4.10 (revision), >= 8.3.17 (revision), >= 8.2.23 (revision), >= 8.4.11, >= 8.3.18

Background

PostgreSQL is an open source object-relational database management system.

Description

Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details.

Impact

A remote authenticated attacker could send a specially crafted SQL query to a PostgreSQL server with the "intarray" module enabled, possibly resulting in the execution of arbitrary code with the privileges of the PostgreSQL server process, or a Denial of Service condition. Furthermore, a remote authenticated attacker could execute arbitrary Perl code, cause a Denial of Service condition via different vectors, bypass LDAP authentication, bypass X.509 certificate validation, gain database privileges, exploit weak blowfish encryption and possibly cause other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL 8.2 users should upgrade to the latest 8.2 base version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=dev-db/postgresql-base-8.2.22:8.2"

All PostgreSQL 8.3 users should upgrade to the latest 8.3 base version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=dev-db/postgresql-base-8.3.16:8.3"

All PostgreSQL 8.4 users should upgrade to the latest 8.4 base version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=dev-db/postgresql-base-8.4.9:8.4"

All PostgreSQL 9.0 users should upgrade to the latest 9.0 base version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=dev-db/postgresql-base-9.0.5:9.0"

All PostgreSQL 8.2 server users should upgrade to the latest 8.2 server version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=dev-db/postgresql-server-8.2.22:8.2"

All PostgreSQL 8.3 server users should upgrade to the latest 8.3 server version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=dev-db/postgresql-server-8.3.16:8.3"

All PostgreSQL 8.4 server users should upgrade to the latest 8.4 server version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=dev-db/postgresql-server-8.4.9:8.4"

All PostgreSQL 9.0 server users should upgrade to the latest 9.0 server version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=dev-db/postgresql-server-9.0.5:9.0"

The old unsplit PostgreSQL packages have been removed from portage. Users still using them are urged to migrate to the new PostgreSQL packages as stated above and to remove the old package:

# emerge --unmerge "dev-db/postgresql"

References

▸ GLSA 200801-15 PostgreSQL: Multiple vulnerabilities this version unaffected high remote 2008-01-29

PostgreSQL contains multiple vulnerabilities that could result in privilege escalation or a Denial of Service.

Announced: 2008-01-29
Revised: 2008-01-29
Access: remote
Bugs: #204760
Advisory: https://security.gentoo.org/glsa/200801-15

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 8.0.15	>= 8.0.15, >= 7.4.19 (revision), >= 7.3.21 (revision)

Background

PostgreSQL is an open source object-relational database management system.

Description

If using the "expression indexes" feature, PostgreSQL executes index functions as the superuser during VACUUM and ANALYZE instead of the table owner, and allows SET ROLE and SET SESSION AUTHORIZATION in the index functions (CVE-2007-6600). Additionally, several errors involving regular expressions were found (CVE-2007-4769, CVE-2007-4772, CVE-2007-6067). Eventually, a privilege escalation vulnerability via unspecified vectors in the DBLink module was reported (CVE-2007-6601). This vulnerability is exploitable when local trust or ident authentication is used, and is due to an incomplete fix of CVE-2007-3278.

Impact

A remote authenticated attacker could send specially crafted queries containing complex regular expressions to the server that could result in a Denial of Service by a server crash (CVE-2007-4769), an infinite loop (CVE-2007-4772) or a memory exhaustion (CVE-2007-6067). The two other vulnerabilities can be exploited to gain additional privileges.

Workaround

There is no known workaround for all these issues at this time.

Resolution

All PostgreSQL users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose "dev-db/postgresql"

References

▸ GLSA 200705-12 PostgreSQL: Privilege escalation this version unaffected normal remote 2007-05-10

PostgreSQL contains a vulnerability that could result in SQL privilege escalation.

Announced: 2007-05-10
Revised: 2009-05-28 (revision 2)
Access: remote
Bugs: #175791
Advisory: https://security.gentoo.org/glsa/200705-12

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 8.0.13	>= 8.0.13, >= 7.4.17 (revision), >= 7.3.19 (revision), >= 7.3.21 (revision), >= 7.4.19 (revision)

Background

PostgreSQL is an open source object-relational database management system.

Description

An error involving insecure search_path settings in the SECURITY DEFINER functions has been reported in PostgreSQL.

Impact

If allowed to call a SECURITY DEFINER function, an attacker could gain the SQL privileges of the owner of the called function.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL users should upgrade to the latest version and fix their SECURITY DEFINER functions:

# emerge --sync
# emerge --ask --oneshot --verbose "dev-db/postgresql"

In order to fix the SECURITY DEFINER functions, PostgreSQL users are advised to refer to the PostgreSQL documentation: http://www.postgresql .org/docs/techdocs.77

References

CVE-2007-2138

▸ GLSA 200703-15 PostgreSQL: Multiple vulnerabilities this version unaffected normal remote 2007-03-16

PostgreSQL contains two vulnerabilities that could result in a Denial of Service or unauthorized access to certain information.

Announced: 2007-03-16
Revised: 2009-05-28 (revision 4)
Access: remote
Bugs: #165482
Advisory: https://security.gentoo.org/glsa/200703-15

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 8.0.11	>= 8.0.11, >= 7.4.17 (revision), >= 7.4.16 (revision), >= 7.3.19 (revision), >= 7.3.13 (revision), >= 7.3.21 (revision), >= 7.4.19 (revision)

Background

PostgreSQL is an open source object-relational database management system.

Description

PostgreSQL does not correctly check the data types of the SQL function arguments under unspecified circumstances nor the format of the provided tables in the query planner.

Impact

A remote authenticated attacker could send specially crafted queries to the server that could result in a server crash and possibly the unauthorized reading of some database content or arbitrary memory.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose "dev-db/postgresql"

References

▸ GLSA 200607-04 PostgreSQL: SQL injection this version unaffected normal remote 2006-07-09

A flaw in the multibyte character handling allows execution of arbitrary SQL statements.

Announced: 2006-07-09
Revised: 2007-06-26 (revision 3)
Access: remote
Bugs: #134168
Advisory: https://security.gentoo.org/glsa/200607-04

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 8.0.8, < 7.4.13	>= 8.0.8

Background

PostgreSQL is an open source object-relational database management system.

Description

PostgreSQL contains a flaw in the string parsing routines that allows certain backslash-escaped characters to be bypassed with some multibyte character encodings. This vulnerability was discovered by Akio Ishida and Yasuo Ohgaki.

Impact

An attacker could execute arbitrary SQL statements on the PostgreSQL server. Be aware that web applications using PostgreSQL as a database back-end might be used to exploit this vulnerability.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL users should upgrade to the latest version in the respective branch they are using:

# emerge --sync
# emerge --ask --oneshot --verbose dev-db/postgresql

Note: While a fix exists for the 7.3 branch it doesn't currently work on Gentoo. All 7.3.x users of PostgreSQL should consider updating their installations to the 7.4 (or higher) branch as soon as possible!

References

▸ GLSA 200505-12 PostgreSQL: Multiple vulnerabilities this version unaffected normal remote 2005-05-15

PostgreSQL is vulnerable to Denial of Service attacks and possibly allows unprivileged users to gain administrator rights.

Announced: 2005-05-15
Revised: 2007-06-26 (revision 4)
Access: remote
Bugs: #91231
Advisory: https://security.gentoo.org/glsa/200505-12

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 7.3.10, < 7.4.7-r2, < 8.0.2-r1	>= 8.0.1-r3 (revision), >= 8.0.2-r1

Background

PostgreSQL is a SQL compliant, open source object-relational database management system.

Description

PostgreSQL gives public EXECUTE access to a number of character conversion routines, but doesn't validate the given arguments (CAN-2005-1409). It has also been reported that the contrib/tsearch2 module of PostgreSQL misdeclares the return value of some functions as "internal" (CAN-2005-1410).

Impact

An attacker could call the character conversion routines with specially setup arguments to crash the backend process of PostgreSQL or to potentially gain administrator rights. A malicious user could also call the misdeclared functions of the contrib/tsearch2 module, resulting in a Denial of Service or other, yet uninvestigated, impacts.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL users should update to the latest available version and follow the guide at http://www.postgresql.o rg/about/news.315

# emerge --sync
# emerge --ask --oneshot --verbose dev-db/postgresql

References

▸ GLSA 200502-19 PostgreSQL: Buffer overflows in PL/PgSQL parser this version unaffected high remote 2005-02-14

PostgreSQL is vulnerable to several buffer overflows in the PL/PgSQL parser leading to execution of arbitrary code.

Announced: 2005-02-14
Revised: 2007-06-26 (revision 4)
Access: remote
Bugs: #81350
Advisory: https://security.gentoo.org/glsa/200502-19

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 7.3.9-r1, < 7.4.13, < 8.0.1-r1	>= 8.0.1-r1

Background

PostgreSQL is a SQL compliant, open source object-relational database management system.

Description

PostgreSQL is vulnerable to several buffer overflows in the PL/PgSQL parser.

Impact

A remote attacker could send a malicious query resulting in the execution of arbitrary code with the permissions of the user running PostgreSQL.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose dev-db/postgresql

References

CAN-2005-0247

▸ GLSA 200502-08 PostgreSQL: Multiple vulnerabilities this version unaffected normal remote and local 2005-02-07

PostgreSQL contains several vulnerabilities which could lead to execution of arbitrary code, Denial of Service and security bypass.

Announced: 2005-02-07
Revised: 2007-06-26 (revision 6)
Access: remote and local
Bugs: #80342
Advisory: https://security.gentoo.org/glsa/200502-08

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	< 7.3.10, < 7.4.7, < 8.0.1	>= 8.0.1

Background

PostgreSQL is a SQL compliant, open source object-relational database management system.

Description

PostgreSQL's contains several vulnerabilities:

John Heasman discovered that the LOAD extension is vulnerable to local privilege escalation (CAN-2005-0227).
It is possible to bypass the EXECUTE permission check for functions (CAN-2005-0244).
The PL/PgSQL parser is vulnerable to heap-based buffer overflow (CAN-2005-0244).
The intagg contrib module is vulnerable to a Denial of Service (CAN-2005-0246).

Impact

An attacker could exploit this to execute arbitrary code with the privileges of the PostgreSQL server, bypass security restrictions and crash the server.

Workaround

There is no know workaround at this time.

Resolution

All PostgreSQL users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose dev-db/postgresql

References

▸ GLSA 200410-16 PostgreSQL: Insecure temporary file use in make_oidjoins_check this version unaffected normal local 2004-10-18

The make_oidjoins_check script, part of the PostgreSQL package, is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files with the rights of the user running the utility.

Announced: 2004-10-18
Revised: 2009-05-28 (revision 4)
Access: local
Bugs: #66371
Advisory: https://security.gentoo.org/glsa/200410-16

Affected packages

Package	Arch	Vulnerable	Unaffected
dev-db/postgresql	*	<= 7.4.5-r1	>= 7.4.5-r2, >= 7.3.7-r2 (revision), >= 7.3.15 (revision), >= 7.3.16 (revision), >= 7.3.18 (revision), >= 7.3.21 (revision)

Background

PostgreSQL is an open source database based on the POSTGRES database management system. It includes several contributed scripts including the make_oidjoins_check script.

Description

The make_oidjoins_check script insecurely creates temporary files in world-writeable directories with predictable names.

Impact

A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewhere on the filesystem. When make_oidjoins_check is called, this would result in file overwrite with the rights of the user running the utility, which could be the root user.

Workaround

There is no known workaround at this time.

Resolution

All PostgreSQL users should upgrade to the latest version:

# emerge sync

# emerge -pv ">=dev-db/postgresql-7.4.5-r2"
# emerge ">=dev-db/postgresql-7.4.5-r2"

Upgrade notes: PostgreSQL 7.3.x users should upgrade to the latest available 7.3.x version to retain database compatibility.