ELSA-2023-7784: postgresql security update (IMPORTANT)

ELSA-2023-7714: postgresql:12 security update (IMPORTANT)

ELSA-2023-7581: postgresql:13 security update (IMPORTANT)

ELSA-2023-7884: postgresql:15 security update (IMPORTANT)

ELSA-2023-7785: postgresql:15 security update (IMPORTANT)

Множественные уязвимости postgresql13

Множественные уязвимости postgresql

Security update for postgresql, postgresql15, postgresql16

Security update for postgresql, postgresql15, postgresql16

Security update for postgresql14

Security update for postgresql13

Security update for postgresql12

Security update for postgresql13

Security update for postgresql12

Security update for postgresql, postgresql15, postgresql16

Security update for postgresql14

Множественные уязвимости postgresql14

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.