An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libecpg-compat3" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libecpg-compat3-dbgsym" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libecpg-dev" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libecpg-dev-dbgsym" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libecpg6" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libecpg6-dbgsym" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libpgtypes3" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libpgtypes3-dbgsym" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libpq-dev" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libpq5" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "libpq5-dbgsym" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-12" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-12-dbgsym" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-client-12" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-client-12-dbgsym" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-doc-12" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-plperl-12" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-plperl-12-dbgsym" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-plpython3-12" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-plpython3-12-dbgsym" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-pltcl-12" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-pltcl-12-dbgsym" }, { "binary_version": "12.6-0ubuntu0.20.04.1", "binary_name": "postgresql-server-dev-12" } ] }