MGASA-2023-0324

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2023-0324.html

Import Source

https://advisories.mageia.org/MGASA-2023-0324.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2023-0324

Related

Published

2023-11-22T01:49:25Z

Modified

2023-11-22T00:17:28Z

Summary

Updated postgresql packages fix security vulnerabilities

Details

The updated packages fix security vulnerabilities:

Memory disclosure in aggregate function calls. (CVE-2023-5868)

Buffer overrun from integer overflow in array modification. (CVE-2023-5869)

Role pgsignalbackend can signal certain superuser processes. (CVE-2023-5870)

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

13.13-1.mga8

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

11.22-1.mga8

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

15.5-1.mga9

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

13.13-1.mga9

{
    "section": "core"
}