Alpine/postgresql: medium 6.5
INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits a
Action: Upgrade postgresql to 9.6.6-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.6.6-r0 | - |
Fixed versions
| 9.6.6-r0 |
Sources
- osv: ALPINE-CVE-2017-15099#Alpine:v3.6/postgresql
- https://security.alpinelinux.org/vuln/CVE-2017-15099
published · modified · JSON