It was discovered that PostgreSQL incorrectly handled certain extension script substitutions. An attacker having database-level CREATE privileges can use this issue to execute arbitrary code as the bootstrap superuser. (CVE-2023-39417)
It was discovered that PostgreSQL incorrectly handled the MERGE command. A remote attacker could possibly use this issue to bypass certain UPDATE and SELECT policies. This issue only affected Ubuntu 23.04. (CVE-2023-39418)
{ "binaries": [ { "binary_name": "libecpg-compat3", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "libecpg-compat3-dbgsym", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "libecpg-dev", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "libecpg-dev-dbgsym", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "libecpg6", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "libecpg6-dbgsym", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "libpgtypes3", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "libpgtypes3-dbgsym", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "libpq-dev", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "libpq5", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "libpq5-dbgsym", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-12", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-12-dbgsym", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-client-12", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-client-12-dbgsym", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-doc-12", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-plperl-12", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-plperl-12-dbgsym", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-plpython3-12", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-plpython3-12-dbgsym", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-pltcl-12", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-pltcl-12-dbgsym", "binary_version": "12.16-0ubuntu0.20.04.1" }, { "binary_name": "postgresql-server-dev-12", "binary_version": "12.16-0ubuntu0.20.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libecpg-compat3", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "libecpg-compat3-dbgsym", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "libecpg-dev", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "libecpg-dev-dbgsym", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "libecpg6", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "libecpg6-dbgsym", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "libpgtypes3", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "libpgtypes3-dbgsym", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "libpq-dev", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "libpq5", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "libpq5-dbgsym", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-14", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-14-dbgsym", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-client-14", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-client-14-dbgsym", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-doc-14", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-plperl-14", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-plperl-14-dbgsym", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-plpython3-14", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-plpython3-14-dbgsym", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-pltcl-14", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-pltcl-14-dbgsym", "binary_version": "14.9-0ubuntu0.22.04.1" }, { "binary_name": "postgresql-server-dev-14", "binary_version": "14.9-0ubuntu0.22.04.1" } ], "availability": "No subscription required" }