p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de postgres-decoderbufs

Vulnérabilités publiées pour postgres-decoderbufs au cours des 30 derniers jours : 2. Présentes dans le catalogue KEV : 0.

RSS ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 23

  1. RLSA-2026:85814

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:18 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufs postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:3.3.1-1.Final.module+el9.8.0+40158+490b3c67
    • Mettez à jour vers 0:3.3.1-1.Final.module+el9.8.0+40213+f1e225a4
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. RLSA-2026:85791

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:16 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufs postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  3. RLSA-2026:69914

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:15 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:1.9.7-1.Final.module+el9.7.0+40011+28af63c9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  4. RLSA-2026:67848

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:18 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser (CVE-2026-6476) * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

    postgres-decoderbufs postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:3.3.1-1.Final.module+el9.8.0+40158+490b3c67
    • Mettez à jour vers 0:3.3.1-1.Final.module+el9.8.0+40213+f1e225a4
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  5. RLSA-2026:67491

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:16 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-

    postgres-decoderbufs postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  6. RLSA-2026:28037

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:15 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:1.9.7-1.Final.module+el9.7.0+40011+28af63c9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  7. RLSA-2026:26204

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:18 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:3.3.1-1.Final.module+el9.8.0+40158+490b3c67
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  8. RLSA-2026:26203

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:16 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475) * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) * postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478) * postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473) For more details about the security issue(s), including the impact, a CVSS

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  9. RLSA-2026:4110

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:16 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004) * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufs postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.7.0+40012+a654bbaa
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.7.0+40060+39463e08
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  10. RLSA-2026:3896

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:15 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006) * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004) * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:1.9.7-1.Final.module+el9.7.0+40011+28af63c9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  11. RLSA-2026:0493

    Élevée · CVSS 7.5Correctif disponible

    Moderate: postgresql:16 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufs postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.7.0+40012+a654bbaa
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.7.0+40060+39463e08
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  12. RLSA-2026:0492

    Élevée · CVSS 7.5Correctif disponible

    Moderate: postgresql:15 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: CREATE STATISTICS does not check for schema CREATE privilege (CVE-2025-12817) * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:1.9.7-1.Final.module+el9.7.0+40011+28af63c9
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  13. RLSA-2025:14862

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:15 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715) * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:1.9.7-1.Final.module+el9.5.0+30637+4391fcca
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  14. RLSA-2025:14827

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:16 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL executes arbitrary code in restore operation (CVE-2025-8715) * postgresql: PostgreSQL code execution in restore operation (CVE-2025-8714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.5.0+30638+72f697e1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  15. RLSA-2024:6020

    Élevée · CVSS 7.5Correctif disponible

    Important: postgresql:15 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348) * postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks (CVE-2024-4317) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:1.9.7-1.Final.module+el9.5.0+30637+4391fcca
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  16. RLSA-2025:1743

    Élevée · CVSS 8.1Correctif disponible

    Important: postgresql:16 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.5.0+30638+72f697e1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  17. RLSA-2025:1741

    Élevée · CVSS 8.1Correctif disponible

    Important: postgresql:15 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (CVE-2025-1094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:1.9.7-1.Final.module+el9.5.0+30637+4391fcca
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  18. RLSA-2024:10788

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:16 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978) * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979) * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.5.0+30638+72f697e1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  19. RLSA-2024:10787

    Élevée · CVSS 8.8Correctif disponible

    Important: postgresql:15 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978) * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979) * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:1.9.7-1.Final.module+el9.5.0+30637+4391fcca
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  20. RLSA-2024:5929

    Élevée · CVSS 7.5Correctif disponible

    Important: postgresql:16 security update

    PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks (CVE-2024-4317) * postgresql: PostgreSQL relation replacement during pg_dump executes arbitrary SQL (CVE-2024-7348) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    postgres-decoderbufsSystèmes d’exploitation
    • Mettez à jour vers 0:2.4.0-1.Final.module+el9.5.0+30638+72f697e1
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →