Summary
Sven Klemm discovered that PostgreSQL incorrectly handled extensions. An
attacker could possibly use this issue to execute arbitrary code when
extensions are created or updated.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | postgresql-10 | 10.22-0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | postgresql-12 | 12.12-0ubuntu0.20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | postgresql-14 | 14.5-0ubuntu0.22.04.1 |
Vulnerabilities 1
-
Unscored —
A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least on…
References
-
report
https://ubuntu.com/security/CVE-2022-2625