Alpine/postgresql14: medium 6.5
INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits a
Action: Upgrade postgresql14 to 10.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.1-r0 | - |
Fixed versions
| 10.1-r0 |
Sources
- osv: ALPINE-CVE-2017-15099#Alpine:v3.15/postgresql14
- https://security.alpinelinux.org/vuln/CVE-2017-15099
published · modified · JSON