{"id":"CVE-2021-32029","aliases":["ALPINE-CVE-2021-32029","ALSA-2021:2372","ALSA-2021:2375","BELL-CVE-2021-32029","BIT-postgresql-2021-32029","DEBIAN-CVE-2021-32029","DSA-4915-1","EUVD-2021-18895","GHSA-f47v-jjrp-x56x","JLSEC-2026-33","MGASA-2021-0221","RHSA-2021:2372","RHSA-2021:2375","RHSA-2021:2389","RHSA-2021:2394","RHSA-2021:2396","RLSA-2021:2372","RLSA-2021:2375","SUSE-SU-2021:1783-1","SUSE-SU-2021:1784-1","SUSE-SU-2021:1785-1","SUSE-SU-2021:1785-2","SUSE-SU-2021:1994-1","SUSE-SU-2022:2958-1","UBUNTU-CVE-2021-32029","USN-4972-1","openSUSE-SU-2021:1785-1","openSUSE-SU-2021:1994-1","openSUSE-SU-2024:11185-1","openSUSE-SU-2024:11186-1","openSUSE-SU-2024:11187-1","openSUSE-SU-2024:12387-1","openSUSE-SU-2024:13243-1","openSUSE-SU-2024:14360-1","openSUSE-SU-2025:15580-1"],"status":"published","title":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table,...","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01504,"percentile":0.74515,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-200"],"published":"2021-05-13T00:00:00Z","modified":"2026-11-03T06:32:40Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"postgresql","fixed_in":["11.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"postgresql","fixed_in":["12.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"postgresql","fixed_in":["12.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"postgresql","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"postgresql","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"postgresql13","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"postgresql13","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql13","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql13","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql13","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"postgresql14","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"postgresql14","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql14","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql14","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql14","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql14","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql15","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql15","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql15","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql15","fixed_in":["13.3-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"postgresql","fixed_in":["11.12.0","12.7.0","13.3.0"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"postgresql-13","fixed_in":["13.3-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibPQ_jll","fixed_in":["14.1.0+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"postgresql-12","fixed_in":["12.7-0ubuntu0.20.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0"},{"fixed":"11.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0"},{"fixed":"12.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0"},{"fixed":"12.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-2.module_el8.6.0+2760+1746ec94"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-2.module_el8.6.0+2758+4f4474df"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-1.module_el8.6.0+2760+1746ec94"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-1.module_el8.5.0+2607+8c0fd184"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-2.module_el8.6.0+2760+1746ec94"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-2.module_el8.5.0+2607+8c0fd184"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-2.module_el8.6.0+2758+4f4474df"}]}],"bundled":3},{"source":"osv","ecosystem":"Bitnami","package":"postgresql","ranges":[{"type":"SEMVER","events":[{"introduced":"11.0.0"},{"fixed":"11.12.0"},{"introduced":"12.0.0"},{"fixed":"12.7.0"},{"introduced":"13.0.0"},{"fixed":"13.3.0"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"postgresql-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"postgresql-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.12-0+deb10u1"}]}],"versions":["11.10-0+deb10u1","11.11-0+deb10u1","11.4-1","11.5-1","11.5-1+deb10u1","11.5-2","11.5-3sid1","11.5-3sid2","11.6-0+deb10u1","11.6-2~sid1","11.7-0+deb10u1","11.9-0+deb10u1"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"LibPQ_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"14.1.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"postgresql9.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.22-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"postgresql11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.12-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"postgresql11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.12-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-6.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pgaudit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-6.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pgaudit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-6.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgres-decoderbufs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgres-decoderbufs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-contrib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-docs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plperl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plpython3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-pltcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-1.module+el8.4.0+8873+b821c30a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pgaudit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-1.module+el8.4.0+8873+b821c30a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pgaudit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-1.module+el8.4.0+8873+b821c30a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+8873+b821c30a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgres-decoderbufs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+8873+b821c30a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgres-decoderbufs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+8873+b821c30a"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-contrib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-docs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plperl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plpython3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-pltcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+11254+85259292"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-4.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pgaudit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-4.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pgaudit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-4.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgres-decoderbufs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgres-decoderbufs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-contrib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-docs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-plperl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-plpython3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-pltcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-server-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-upgrade-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-upgrade-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-contrib-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-server-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-contrib-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-server-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql13-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-6.module+el8.4.0+587+d46efd10"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.5.0+684+c3892ef9"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+424+71d47d9a"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+545+ca56da2e"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-1.module+el8.5.0+684+c3892ef9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-1.module+el8.4.0+546+3620623e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.5.0+684+c3892ef9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+424+71d47d9a"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.3-1.module+el8.4.0+546+3620623e"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-3.15.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-3.15.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-3.15.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-3.9.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-3.9.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-3.9.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-5.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-5.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-5.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-5.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-5.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-5.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-8.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP3","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-8.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-8.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.12-150100.3.33.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04","9.3.7-0ubuntu0.14.04","9.3.8-0ubuntu0.4.04","9.3.9-0ubuntu0.14.04","9.3.10-0ubuntu0.14.04","9.3.11-0ubuntu0.14.04","9.3.12-0ubuntu0.14.04","9.3.13-0ubuntu0.14.04","9.3.14-0ubuntu0.14.04","9.3.15-0ubuntu0.14.04","9.3.16-0ubuntu0.14.04","9.3.17-0ubuntu0.14.04","9.3.18-0ubuntu0.14.04.1","9.3.19-0ubuntu0.14.04","9.3.20-0ubuntu0.14.04","9.3.21-0ubuntu0.14.04","9.3.22-0ubuntu0.14.04","9.3.23-0ubuntu0.14.04","9.3.24-0ubuntu0.14.04","9.3.24-0ubuntu0.14.04+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"postgresql-12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-0ubuntu0.20.04.1"}]}],"versions":["12.0-1","12.1-1","12.1-2build1","12.2-1","12.2-1ubuntu2","12.2-4","12.4-0ubuntu0.20.04.1","12.5-0ubuntu0.20.04.1","12.6-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"postgresql-10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.17-0ubuntu0.18.04.1"}]}],"versions":["10.1-1","10.1-2","10.2-1","10.3-1","10.4-0ubuntu0.18.04","10.5-0ubuntu0.18.04","10.6-0ubuntu0.18.04.1","10.7-0ubuntu0.18.04.1","10.8-0ubuntu0.18.04.1","10.9-0ubuntu0.18.04.1","10.10-0ubuntu0.18.04.1","10.12-0ubuntu0.18.04.1","10.14-0ubuntu0.18.04.1","10.15-0ubuntu0.18.04.1","10.16-0ubuntu0.18.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"postgresql-12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-0ubuntu0.20.04.1"}]}],"versions":["12.0-1","12.1-1","12.1-2build1","12.2-1","12.2-1ubuntu2","12.2-4","12.4-0ubuntu0.20.04.1","12.5-0ubuntu0.20.04.1","12.6-0ubuntu0.20.04.1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.3-5.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-8.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.13-1.3"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.8-1.3"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.4-1.3"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.5-2.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4-2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.4-1.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6-2.1"}]}],"bundled":18}],"products":[{"vendor":"postgresql","product":"postgresql"},{"vendor":"redhat","product":"jboss_enterprise_application_platform"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956883","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","web","report"]},{"url":"https://www.postgresql.org/support/security/CVE-2021-32029/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://security.netapp.com/advisory/ntap-20211112-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32029","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-f47v-jjrp-x56x"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-32029","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-2372.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-32027","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-32028","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-32029","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3393","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-2375.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-32029","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-32029","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0221.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28929","tags":["report"]},{"url":"https://www.postgresql.org/about/news/postgresql-133-127-1112-1017-and-9622-released-2210/","tags":["web","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2372","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956877","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2372.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3393","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3393","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3393","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2021-3393/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32027","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32027","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32027","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2021-32027/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32028","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32028","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2021-32028/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32029","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32029","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2375","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2375.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2389","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2389.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2394","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2394.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2396","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2396.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:2372","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:2375","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211783-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179945","tags":["report"]},{"url":"https://bugzilla.suse.com/1182040","tags":["report"]},{"url":"https://bugzilla.suse.com/1183118","tags":["report"]},{"url":"https://bugzilla.suse.com/1183168","tags":["report"]},{"url":"https://bugzilla.suse.com/1185924","tags":["report"]},{"url":"https://bugzilla.suse.com/1185925","tags":["report"]},{"url":"https://bugzilla.suse.com/1185926","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3393","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211784-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211785-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211785-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211994-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222958-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185952","tags":["report"]},{"url":"https://bugzilla.suse.com/1187751","tags":["report"]},{"url":"https://bugzilla.suse.com/1189748","tags":["report"]},{"url":"https://bugzilla.suse.com/1190740","tags":["report"]},{"url":"https://bugzilla.suse.com/1192516","tags":["report"]},{"url":"https://bugzilla.suse.com/1195680","tags":["report"]},{"url":"https://bugzilla.suse.com/1198166","tags":["report"]},{"url":"https://bugzilla.suse.com/1199475","tags":["report"]},{"url":"https://bugzilla.suse.com/1202368","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2625","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-32029","tags":["report"]},{"url":"https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=a71cfc56bf6013e3ea1d673acaf73fe7ebbd6bf3","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4972-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-32027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-32028","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YKAEBUWSUHMGHAQQGZGGJL4XNRQXGZEZ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6AKC5KVKWVYW4R23NQPYSXI57JD6CIYN/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20229","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RSHH7GG3JERRES4WX7FTBWO2TZCAMJMP/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0985","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-32029","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2021-10-08T16:44:22Z","modified":"2024-08-03T23:17:29.448Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:33:07.014772Z"}],"euvd":[{"id":"EUVD-2021-18895","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2021-10-08T16:44:22Z","modified":"2024-08-03T23:17:29Z","updated_at":"2026-11-03T03:24:37.407491Z"}],"ghsa":[{"id":"GHSA-f47v-jjrp-x56x","title":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table,...","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2022-05-24T19:17:02Z","modified":"2023-01-27T05:04:01Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125","CWE-200"],"updated_at":"2026-11-02T14:42:22.043841Z"}],"nvd":[{"id":"CVE-2021-32029","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2021-10-08T17:15:07.493Z","modified":"2026-06-17T03:52:42.2Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200","CWE-125"],"updated_at":"2026-11-02T14:06:59.689345Z"}],"osv":[{"id":"ALPINE-CVE-2021-32029","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2021-10-08T17:15:07.493Z","modified":"2026-11-03T06:32:40.35181006Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"BELL-CVE-2021-32029","title":"CVE-2021-32029 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:09.88817Z","modified":"2026-01-26T09:47:53.494902Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-32029","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2021-10-08T17:15:07.493Z","modified":"2026-04-16T04:35:10.923995546Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:19.793849Z"},{"id":"DEBIAN-CVE-2021-32029","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2021-10-08T17:15:07.493Z","modified":"2026-08-27T23:04:02.570607731Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.94143Z"},{"id":"JLSEC-2026-33","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2026-04-03T13:27:15.647Z","modified":"2026-07-18T00:00:41.290751522Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"RHSA-2021:2372","title":"Red Hat Security Advisory: postgresql:12 security update","status":"published","published":"2024-10-21T23:51:27Z","modified":"2026-08-05T10:09:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2375","title":"Red Hat Security Advisory: postgresql:13 security update","status":"published","published":"2024-10-21T23:51:35Z","modified":"2026-08-05T10:09:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2389","title":"Red Hat Security Advisory: postgresql:12 security update","status":"published","published":"2024-10-21T23:51:50Z","modified":"2026-08-05T10:09:01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2394","title":"Red Hat Security Advisory: rh-postgresql12-postgresql security update","status":"published","published":"2024-09-13T20:27:38Z","modified":"2026-08-05T10:09:04Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2396","title":"Red Hat Security Advisory: rh-postgresql13-postgresql security update","status":"published","published":"2024-09-13T20:27:30Z","modified":"2026-08-05T10:09:05Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:2372","title":"Important: postgresql:12 security update","description":"PostgreSQL is an advanced object-relational database management system (DBMS).\n\nThe following packages have been upgraded to a later upstream version: postgresql (12.7)\n\nSecurity Fix(es):\n\n* postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)\n\n* postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028)\n\n* postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029)\n\n* postgresql: Partition constraint violation errors leak values of denied columns (CVE-2021-3393)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-10T08:45:14Z","modified":"2026-02-04T08:30:16.606551Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2021:2375","title":"Important: postgresql:13 security update","description":"PostgreSQL is an advanced object-relational database management system (DBMS).\n\nThe following packages have been upgraded to a later upstream version: postgresql (13.3).\n\nSecurity Fix(es):\n\n* postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)\n\n* postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028)\n\n* postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-10T09:54:30Z","modified":"2026-02-05T06:15:05.010217Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-32029","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2021-05-13T00:00:00Z","modified":"2026-04-22T12:54:11.499168Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:27.332852Z"},{"id":"ALSA-2021:2372","title":"Important: postgresql:12 security update","description":"PostgreSQL is an advanced object-relational database management system (DBMS).\n\nThe following packages have been upgraded to a later upstream version: postgresql (12.7)\n\nSecurity Fix(es):\n\n* postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)\n\n* postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028)\n\n* postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029)\n\n* postgresql: Partition constraint violation errors leak values of denied columns (CVE-2021-3393)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-10T08:45:14Z","modified":"2026-10-29T11:00:58.362727397Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2021:2375","title":"Important: postgresql:13 security update","description":"PostgreSQL is an advanced object-relational database management system (DBMS).\n\nThe following packages have been upgraded to a later upstream version: postgresql (13.3).\n\nSecurity Fix(es):\n\n* postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)\n\n* postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028)\n\n* postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-10T09:54:30Z","modified":"2026-10-29T11:00:59.028059716Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-postgresql-2021-32029","description":"A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.","status":"published","published":"2024-03-06T11:04:47.672Z","modified":"2026-09-08T08:47:58.884472901Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"DSA-4915-1","title":"postgresql-11 - security update","status":"published","published":"2021-05-13T00:00:00Z","modified":"2026-03-09T02:11:29.525977Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0221","title":"Updated postgresql packages fix security vulnerabilities","description":"Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027).\n\nMemory disclosure in INSERT ... ON CONFLICT ... DO UPDATE. (CVE-2021-32028).\n\nMemory disclosure in partitioned-table UPDATE ... RETURNING. (CVE-2021-32029).\n","status":"published","published":"2021-05-23T18:45:17Z","modified":"2026-04-16T04:43:50.662602002Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:1785-1","title":"Security update for postgresql13","description":"This update for postgresql13 fixes the following issues:\n\n- Upgrade to version 13.3:\n- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).\n- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).\n- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING outputs for joined cross-partition updates (bsc#1185926).\n\n- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).\n- Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118).\n- Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945).\n","status":"published","published":"2021-07-19T10:00:12Z","modified":"2026-02-04T04:13:51.60152Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:1994-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n\nUpgrade to version 12.7:\n\n- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).\n- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).\n- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING outputs for joined cross-partition updates (bsc#1185926).\n\n- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).\n- Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118).\n- Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945).\n","status":"published","published":"2021-07-10T06:18:48Z","modified":"2026-02-04T04:09:33.788962Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11185-1","title":"postgresql11-11.13-1.3 on GA media","description":"These are all security issues fixed in the postgresql11-11.13-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:47.930292Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11186-1","title":"postgresql12-12.8-1.3 on GA media","description":"These are all security issues fixed in the postgresql12-12.8-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:11:32.102087Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11187-1","title":"libecpg6-13.4-1.3 on GA media","description":"These are all security issues fixed in the libecpg6-13.4-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:19:24.685507Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:12387-1","title":"postgresql14-14.5-2.1 on GA media","description":"These are all security issues fixed in the postgresql14-14.5-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:18:25.723693Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:13243-1","title":"postgresql15-15.4-2.1 on GA media","description":"These are all security issues fixed in the postgresql15-15.4-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:41:37.040292Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:14360-1","title":"postgresql16-16.4-1.1 on GA media","description":"These are all security issues fixed in the postgresql16-16.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-23T00:00:00Z","modified":"2026-02-04T03:11:26.033442Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:15580-1","title":"postgresql17-17.6-2.1 on GA media","description":"These are all security issues fixed in the postgresql17-17.6-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-26T00:00:00Z","modified":"2026-03-23T04:53:58.134493Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2021:1783-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n\n- Upgrade to version 12.7:\n- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).\n- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).\n- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING 'pg_psql_temporary_savepoint' does not exist (bsc#1185926).\n- CVE-2021-3393: Fixed information leakage in constraint-violation error messages (bsc#1182040).\n\n- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).\n- Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118).\n- Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945).\n","status":"published","published":"2021-05-27T14:35:18Z","modified":"2026-02-04T02:16:16.237522Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1784-1","title":"Security update for postgresql13","description":"This update for postgresql13 fixes the following issues:\n\n- Upgrade to version 13.3:\n- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).\n- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).\n- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING 'pg_psql_temporary_savepoint' does not exist (bsc#1185926).\n \n- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).\n- Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118).\n- Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945).\n","status":"published","published":"2021-05-27T14:36:21Z","modified":"2026-02-04T03:14:12.252255Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1785-1","title":"Security update for postgresql13","description":"This update for postgresql13 fixes the following issues:\n\n- Upgrade to version 13.3:\n- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).\n- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).\n- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING outputs for joined cross-partition updates (bsc#1185926).\n\n- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).\n- Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118).\n- Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945).\n","status":"published","published":"2021-05-27T14:44:49Z","modified":"2026-02-04T02:27:33.054075Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1785-2","title":"Security update for postgresql13","description":"This update for postgresql13 fixes the following issues:\n\n- Upgrade to version 13.3:\n- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).\n- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).\n- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING outputs for joined cross-partition updates (bsc#1185926).\n\n- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).\n- Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118).\n- Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945).\n","status":"published","published":"2021-07-11T09:10:08Z","modified":"2026-02-04T02:30:40.294034Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1994-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n\nUpgrade to version 12.7:\n\n- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).\n- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).\n- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING outputs for joined cross-partition updates (bsc#1185926).\n\n- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).\n- Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118).\n- Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945).\n","status":"published","published":"2021-06-17T11:36:15Z","modified":"2026-02-04T03:30:36.730608Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2022:2958-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n\n- Upgrade to 12.12:\n- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).\n\n- Upgrade to 12.11:\n- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).\n\n- Upgrade to 12.10 (bsc#1195680)\n- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)\n\n- Upgrade to version 12.9 (bsc#1192516):\n- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake\n- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake\n    \n- Upgrade to version 12.8:\n- CVE-2021-3677: Fixed memory disclosure in certain queries (bsc#1189748).\n\n- Upgrade to version 12.7:\n- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).\n- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).\n- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING 'pg_psql_temporary_savepoint' does not exist (bsc#1185926).\n\n- Fixed build with llvm12 on s390x (bsc#1185952).\n- Re-enabled icu for PostgreSQL 10 (bsc#1179945).\n- Made the dependency of postgresqlXX-server-devel on llvm and clang optional (bsc#1187751).\n- llvm12 breaks PostgreSQL 11 and 12 on s390x. Use llvm11 as a workaround (bsc#1185952).\n- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).\n","status":"published","published":"2022-08-31T11:08:21Z","modified":"2026-02-04T03:03:01.248272Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-4972-1","title":"postgresql-10, postgresql-12, postgresql-13 vulnerabilities","description":"Tom Lane discovered that PostgreSQL incorrect handled certain array\nsubscripting calculations. An authenticated attacker could possibly use\nthis issue to overwrite server memory and escalate privileges.\n(CVE-2021-32027)\n\nAndres Freund discovered that PostgreSQL incorrect handled certain\nINSERT ... ON CONFLICT ... DO UPDATE commands. A remote attacker could\npossibly use this issue to read server memory and obtain sensitive\ninformation. (CVE-2021-32028)\n\nTom Lane discovered that PostgreSQL incorrect handled certain UPDATE ...\nRETURNING commands. A remote attacker could possibly use this issue to read\nserver memory and obtain sensitive information. This issue only affected\nUbuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-32029)\n","status":"published","published":"2021-06-01T11:48:38Z","modified":"2026-04-27T18:44:48.966353Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}