Alpine/postgresql: medium 6.5
A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbitrary bytes of server memory. In the default config
Action: Upgrade postgresql to 10.8-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.0 | - | - |
Fixed versions
| 10.8-r0 |
Sources
- osv: ALPINE-CVE-2019-10129#Alpine:v3.7/postgresql
- https://security.alpinelinux.org/vuln/CVE-2019-10129
published · modified · JSON