USN-6968-1: PostgreSQL vulnerability
Published Aug 19, 2024
·Updated
Noah Misch discovered that PostgreSQL incorrectly handled certain SQL objects. An attacker could possibly use this issue to execute arbitrary SQL functions as the superuser.
Affected Software
12 affected componentsFixes available
All of the following
ubuntu/postgresql-16<16.4-0ubuntu0.24.04.1
16.4-0ubuntu0.24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/postgresql-client-16<16.4-0ubuntu0.24.04.1
16.4-0ubuntu0.24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/postgresql-14<14.13-0ubuntu0.22.04.1
14.13-0ubuntu0.22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/postgresql-client-14<14.13-0ubuntu0.22.04.1
14.13-0ubuntu0.22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/postgresql-12<12.20-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/postgresql-client-12<12.20-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1
Ubuntu Ubuntu=20.04
Event History
Aug 19, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6968-1?
The severity of USN-6968-1 is considered high due to the potential for arbitrary SQL execution as a superuser.
2
How do I fix USN-6968-1?
You can fix USN-6968-1 by upgrading to the patched versions of PostgreSQL specific to your Ubuntu release.
3
What systems are affected by USN-6968-1?
USN-6968-1 affects PostgreSQL versions 12, 14, and 16 on Ubuntu systems 20.04, 22.04, and 24.04.
4
What is the nature of the vulnerability in USN-6968-1?
The vulnerability in USN-6968-1 allows attackers to exploit improper handling of SQL objects to execute arbitrary functions.
5
Who discovered the vulnerability addressed in USN-6968-1?
The vulnerability addressed in USN-6968-1 was discovered by Noah Misch.