Alpine/postgresql: high 8.1
It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ... ON CONFLICT DO UPDATE"
Action: Upgrade postgresql to 10.5-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.5.0 | 10.5-r0 | - |
Fixed versions
| 10.5-r0 |
Sources
- osv: ALPINE-CVE-2018-10925#Alpine:v3.12/postgresql
- https://security.alpinelinux.org/vuln/CVE-2018-10925
published · modified · JSON