Debian/postgresql-15: medium 4.3
Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs allows an unprivileged database user to read most common values and other statistics from CREATE STATISTICS comma
Action: Upgrade postgresql-15 to 15.7-0+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 15.7-0+deb12u1 | - |
Fixed versions
| 15.7-0+deb12u1 |
Sources
published · modified · JSON