Summary
It was discovered that PostgreSQL incorrectly performed authorization
checks when handling the "ALTER ... DEPENDS ON EXTENSION" sub-commands. A
remote attacker could possibly use this issue to drop any function,
procedure, materialized view, index, or trigger under certain conditions.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | postgresql-10 | 10.12-0ubuntu0.18.04.1 |
Vulnerabilities 1
-
Low 3.1
A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization che…
References
-
report
https://ubuntu.com/security/CVE-2020-1720