Alpine/postgresql: medium 6.5
A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from th
Action: Upgrade postgresql to 12.7-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.0 | 12.7-r0 | - |
Fixed versions
| 12.7-r0 |
Sources
- osv: ALPINE-CVE-2021-32029#Alpine:v3.12/postgresql
- https://security.alpinelinux.org/vuln/CVE-2021-32029
published · modified · JSON