USN-6230-1: PostgreSQL vulnerability
Published Jul 13, 2023
·Updated
Alexander Lakhin discovered that PostgreSQL incorrectly handled certain CREATE privileges. An authenticated user could possibly use this issue to execute arbitrary code as the bootstrap supervisor.
Affected Software
4 affected componentsFixes available
All of the following
ubuntu/postgresql-9.5<9.5.25-0ubuntu0.16.04.1+esm4
9.5.25-0ubuntu0.16.04.1+esm4
Ubuntu Ubuntu=16.04
All of the following
ubuntu/postgresql-client-9.5<9.5.25-0ubuntu0.16.04.1+esm4
9.5.25-0ubuntu0.16.04.1+esm4
Ubuntu Ubuntu=16.04
Event History
Jul 13, 2023
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for this PostgreSQL vulnerability?
The vulnerability ID for this PostgreSQL vulnerability is USN-6230-1.
2
What is the severity of USN-6230-1?
The severity of USN-6230-1 is not specified in the description.
3
How does the PostgreSQL vulnerability affect the system?
The PostgreSQL vulnerability allows an authenticated user to execute arbitrary code as the bootstrap supervisor.
4
Which versions of PostgreSQL are affected by USN-6230-1?
Versions 9.5.25-0ubuntu0.16.04.1+esm4 of PostgreSQL and postgresql-client-9.5 are affected by USN-6230-1.
5
How can I fix the PostgreSQL vulnerability described in USN-6230-1?
To fix the PostgreSQL vulnerability, update to the version 9.5.25-0ubuntu0.16.04.1+esm4 or later.