PostgreSQL — свободная объектно-реляционная система управления базами данных.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.11 | 17.11 | ||
| 17.10 | 17.10 | ||
| 17.9 | 17.9 | ||
| 17.8 | 17.8 | ||
| 17.7 | 17.7 | ||
| 17.6 | 17.6 | ||
| 17.5 | 17.5 | ||
| 17.4 | 17.4 | ||
| 17.3 | 17.3 | ||
| 17.2 | 17.2 |
Показывать по
Количество 1 300
SUSE-SU-2024:0541-1
Security update for postgresql13
SUSE-SU-2024:0546-1
Security update for postgresql16
SUSE-SU-2024:0540-1
Security update for postgresql14
SUSE-SU-2024:0552-1
Security update for postgresql14
SUSE-SU-2024:0550-1
Security update for postgresql16
SUSE-SU-2024:0522-1
Security update for postgresql13
SUSE-SU-2024:0523-1
Security update for postgresql12
SUSE-SU-2024:0520-1
Security update for postgresql15
CVE-2024-0985
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.
CVE-2024-0985
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | SUSE-SU-2024:0541-1 Security update for postgresql13 | 2% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0546-1 Security update for postgresql16 | 2% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0540-1 Security update for postgresql14 | 2% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0552-1 Security update for postgresql14 | 2% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0550-1 Security update for postgresql16 | 2% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0522-1 Security update for postgresql13 | 2% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0523-1 Security update for postgresql12 | 2% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0520-1 Security update for postgresql15 | 2% Низкий | больше 2 лет назад | |
 | CVE-2024-0985 Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected. | CVSS3: 8 | 2% Низкий | почти 3 года назад |
 | CVE-2024-0985 Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected. | CVSS3: 8 | 2% Низкий | почти 3 года назад |
Уязвимостей на страницу