{"id":"CVE-2021-3393","aliases":["ALPINE-CVE-2021-3393","ALSA-2021:2372","BELL-CVE-2021-3393","BIT-postgresql-2021-3393","DEBIAN-CVE-2021-3393","EUVD-2021-26722","GHSA-rf5r-cr88-cr97","JLSEC-2026-34","MGASA-2021-0121","RHSA-2021:2372","RHSA-2021:2389","RHSA-2021:2394","RLSA-2021:2372","SUSE-SU-2021:0543-1","SUSE-SU-2021:0544-1","SUSE-SU-2021:0545-1","SUSE-SU-2021:0695-1","SUSE-SU-2021:1783-1","UBUNTU-CVE-2021-3393","USN-4735-1","openSUSE-SU-2021:0423-1","openSUSE-SU-2024:11185-1","openSUSE-SU-2024:11186-1","openSUSE-SU-2024:11187-1","openSUSE-SU-2024:12387-1","openSUSE-SU-2024:13243-1","openSUSE-SU-2024:14360-1","openSUSE-SU-2025:15580-1"],"status":"published","title":"Generation of Error Message Containing Sensitive Information in postgresql","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01187,"percentile":0.68087,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-209"],"published":"2021-02-12T00:00:00Z","modified":"2026-11-03T06:32:40Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"postgresql","fixed_in":["11.11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"postgresql","fixed_in":["12.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"postgresql","fixed_in":["12.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"postgresql","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"postgresql","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"postgresql","fixed_in":["11.11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"postgresql13","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"postgresql13","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql13","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql13","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql13","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"postgresql14","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"postgresql14","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql14","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql14","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql14","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql14","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql15","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql15","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql15","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql15","fixed_in":["13.2-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"postgresql","fixed_in":["11.11.0","12.6.0","13.2.0"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"postgresql-13","fixed_in":["13.2-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibPQ_jll","fixed_in":["14.1.0+0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"postgresql12","fixed_in":["12.6-8.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"postgresql12","fixed_in":["12.6-8.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"postgresql12","fixed_in":["12.6-3.21.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"postgresql12","fixed_in":["12.6-3.21.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"postgresql12","fixed_in":["12.6-3.21.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"postgresql12","fixed_in":["12.6-3.21.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"postgresql12","fixed_in":["12.6-3.21.4"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"postgresql12","fixed_in":["12.6-3.21.4"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"postgresql12","fixed_in":["12.6-3.21.4"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"postgresql12","fixed_in":["12.6-3.21.4"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"postgresql12","fixed_in":["12.6-3.21.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"postgresql-12","fixed_in":["12.6-0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"postgresql12","fixed_in":["12.6-lp152.3.16.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"11.11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"12.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"12.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"11.11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-2.module_el8.6.0+2760+1746ec94"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-2.module_el8.6.0+2758+4f4474df"}]}],"bundled":4},{"source":"osv","ecosystem":"Bitnami","package":"postgresql","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"11.11.0"},{"introduced":"12.0.0"},{"fixed":"12.6.0"},{"introduced":"13.0.0"},{"fixed":"13.2.0"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"postgresql-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"LibPQ_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"14.1.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"postgresql9.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.21-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"postgresql11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.11-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"postgresql11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.11-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-6.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pgaudit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-6.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pgaudit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-6.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgres-decoderbufs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgres-decoderbufs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-contrib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-docs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plperl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-plpython3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-pltcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-server-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"postgresql-upgrade-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+11288+c193d6d7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-4.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pgaudit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-4.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pgaudit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-4.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgres-decoderbufs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgres-decoderbufs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.2.0+9043+1dbb5661"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-contrib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-docs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-plperl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-plpython3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-plpython3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-pltcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-server-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-test-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-upgrade-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-upgrade-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"postgresql-upgrade-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.2.0+11251+7a3cc531"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-contrib-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-server-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql12-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pgaudit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-6.module+el8.4.0+587+d46efd10"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.5.0+684+c3892ef9"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"postgres-decoderbufs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-2.module+el8.4.0+424+71d47d9a"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.7-1.module+el8.4.0+545+ca56da2e"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-8.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-8.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-3.21.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-3.21.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-3.21.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-3.21.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-3.21.4"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-3.21.4"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-3.21.4"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-3.21.4"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-3.21.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-3.15.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-3.15.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.7-3.15.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"postgresql-12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-0ubuntu0.20.04.1"}]}],"versions":["12.0-1","12.1-1","12.1-2build1","12.2-1","12.2-1ubuntu2","12.2-4","12.4-0ubuntu0.20.04.1","12.5-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"postgresql-12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-0ubuntu0.20.04.1"}]}],"versions":["12.0-1","12.1-1","12.1-2build1","12.2-1","12.2-1ubuntu2","12.2-4","12.4-0ubuntu0.20.04.1","12.5-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.6-lp152.3.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.13-1.3"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.8-1.3"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.4-1.3"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.5-2.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4-2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.4-1.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.6-2.1"}]}],"bundled":18}],"products":[{"vendor":"postgresql","product":"postgresql"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"software_collections"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924005","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","advisory","report","web"]},{"url":"https://security.netapp.com/advisory/ntap-20210507-0006/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202105-32","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3393","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-rf5r-cr88-cr97"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3393","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-2372.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-32027","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-32028","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-32029","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3393","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3393","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3393","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0121.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28373","tags":["report"]},{"url":"https://www.postgresql.org/about/news/postgresql-132-126-1111-1016-9621-and-9525-released-2165/","tags":["web","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2372","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956883","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2372.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3393","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3393","tags":["advisory","report"]},{"url":"https://www.postgresql.org/support/security/CVE-2021-3393/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32027","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32027","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32027","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2021-32027/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32028","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32028","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2021-32028/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32029","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32029","tags":["advisory"]},{"url":"https://www.postgresql.org/support/security/CVE-2021-32029/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2389","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2389.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2394","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2394.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:2372","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210543-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179765","tags":["report"]},{"url":"https://bugzilla.suse.com/1182039","tags":["report"]},{"url":"https://bugzilla.suse.com/1182040","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3393","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210544-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210545-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210695-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211783-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179945","tags":["report"]},{"url":"https://bugzilla.suse.com/1183118","tags":["report"]},{"url":"https://bugzilla.suse.com/1183168","tags":["report"]},{"url":"https://bugzilla.suse.com/1185924","tags":["report"]},{"url":"https://bugzilla.suse.com/1185925","tags":["report"]},{"url":"https://bugzilla.suse.com/1185926","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32029","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-3393","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4735-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IILVBEHTY5E5NJCJLBHIW7MZUDL25BDR/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1552","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RSHH7GG3JERRES4WX7FTBWO2TZCAMJMP/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0985","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-3393","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","status":"published","published":"2021-04-01T13:46:02Z","modified":"2024-08-03T16:53:17.479Z","cwes":["CWE-209"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26722","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","status":"published","published":"2021-04-01T13:46:02Z","modified":"2024-08-03T16:53:17Z","updated_at":"2026-11-03T03:25:13.052236Z"}],"ghsa":[{"id":"GHSA-rf5r-cr88-cr97","title":"Generation of Error Message Containing Sensitive Information in postgresql","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","status":"published","published":"2022-02-15T01:45:25Z","modified":"2023-02-01T05:06:06Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:50:19.146831Z"}],"nvd":[{"id":"CVE-2021-3393","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","status":"published","published":"2021-04-01T14:15:13.657Z","modified":"2026-06-17T04:05:01.073Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:06:51.197859Z"}],"osv":[{"id":"ALPINE-CVE-2021-3393","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","status":"published","published":"2021-04-01T14:15:13.657Z","modified":"2026-11-03T06:32:40.669079221Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"BELL-CVE-2021-3393","title":"CVE-2021-3393 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:03.713425Z","modified":"2026-01-26T09:49:54.902398Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3393","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","status":"published","published":"2021-04-01T14:15:13.657Z","modified":"2026-04-16T04:31:03.07164001Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-3393","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","status":"published","published":"2021-04-01T14:15:13.657Z","modified":"2026-08-27T23:04:07.837247877Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"JLSEC-2026-34","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","status":"published","published":"2026-04-03T13:27:15.647Z","modified":"2026-07-18T00:00:42.270969757Z","cvss":[{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","level":"low"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"RHSA-2021:2372","title":"Red Hat Security Advisory: postgresql:12 security update","status":"published","published":"2024-10-21T23:51:27Z","modified":"2026-08-05T10:09:00Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2389","title":"Red Hat Security Advisory: postgresql:12 security update","status":"published","published":"2024-10-21T23:51:50Z","modified":"2026-08-05T10:09:01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2394","title":"Red Hat Security Advisory: rh-postgresql12-postgresql security update","status":"published","published":"2024-09-13T20:27:38Z","modified":"2026-08-05T10:09:04Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:2372","title":"Important: postgresql:12 security update","description":"PostgreSQL is an advanced object-relational database management system (DBMS).\n\nThe following packages have been upgraded to a later upstream version: postgresql (12.7)\n\nSecurity Fix(es):\n\n* postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)\n\n* postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028)\n\n* postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029)\n\n* postgresql: Partition constraint violation errors leak values of denied columns (CVE-2021-3393)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-10T08:45:14Z","modified":"2026-02-04T08:30:16.606551Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-3393","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","status":"published","published":"2021-02-12T00:00:00Z","modified":"2026-04-22T12:55:21.157226Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"ALSA-2021:2372","title":"Important: postgresql:12 security update","description":"PostgreSQL is an advanced object-relational database management system (DBMS).\n\nThe following packages have been upgraded to a later upstream version: postgresql (12.7)\n\nSecurity Fix(es):\n\n* postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)\n\n* postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028)\n\n* postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029)\n\n* postgresql: Partition constraint violation errors leak values of denied columns (CVE-2021-3393)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-10T08:45:14Z","modified":"2026-10-29T11:00:58.362727397Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-postgresql-2021-3393","description":"An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.","status":"published","published":"2024-03-06T11:04:37.907Z","modified":"2026-09-08T08:47:47.495820715Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"MGASA-2021-0121","title":"Updated postgresql packages fix security vulnerabilities","description":"A user having an UPDATE privilege on a partitioned table but lacking the SELECT\nprivilege on some column may be able to acquire denied-column values from an\nerror message (CVE-2021-3393).\n\nA user having a SELECT privilege on an individual column can craft a special\nquery that returns all columns of the table. Additionally, a stored view that\nuses column-level privileges will have incomplete column-usage bitmaps. In\ninstallations that depend on column-level permissions for security, it is\nrecommended to execute CREATE OR REPLACE on all user-defined views to force\nthem to be re-parsed (CVE-2021-20229).\n\nPostgreSQL 11 was only affected by CVE-2021-3393 and both PostgreSQL 11 and 13\nwere affected by CVE-2021-20229.  PostgreSQL 9.6 was updated to fix bugs.\n","status":"published","published":"2021-03-12T01:25:47Z","modified":"2026-04-16T04:44:06.627542613Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0423-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n\nUpgrade to version 12.6:\n\n- Reindexing might be needed after applying this update.\n- CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages.\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2021-03-16T17:07:29Z","modified":"2026-02-04T03:56:03.316214Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:11185-1","title":"postgresql11-11.13-1.3 on GA media","description":"These are all security issues fixed in the postgresql11-11.13-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:47.930292Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11186-1","title":"postgresql12-12.8-1.3 on GA media","description":"These are all security issues fixed in the postgresql12-12.8-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:11:32.102087Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11187-1","title":"libecpg6-13.4-1.3 on GA media","description":"These are all security issues fixed in the libecpg6-13.4-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:19:24.685507Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:12387-1","title":"postgresql14-14.5-2.1 on GA media","description":"These are all security issues fixed in the postgresql14-14.5-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:18:25.723693Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:13243-1","title":"postgresql15-15.4-2.1 on GA media","description":"These are all security issues fixed in the postgresql15-15.4-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:41:37.040292Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:14360-1","title":"postgresql16-16.4-1.1 on GA media","description":"These are all security issues fixed in the postgresql16-16.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-23T00:00:00Z","modified":"2026-02-04T03:11:26.033442Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:15580-1","title":"postgresql17-17.6-2.1 on GA media","description":"These are all security issues fixed in the postgresql17-17.6-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-26T00:00:00Z","modified":"2026-03-23T04:53:58.134493Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2021:0543-1","title":"Security update for postgresql13","description":"This update for postgresql13 fixes the following issues:\n\nUpgrade to version 13.2:\n\n  * Updating stored views and reindexing might be needed after applying this update.\n  * CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages.\n  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column SELECT privileges in some join queries.\n","status":"published","published":"2021-02-22T12:55:03Z","modified":"2026-02-04T04:02:38.705396Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0544-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n\nUpgrade to version 12.6:\n\n- Reindexing might be needed after applying this update.\n- CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages.\n","status":"published","published":"2021-02-22T12:55:16Z","modified":"2025-05-02T04:10:43.654411Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0545-1","title":"Security update for postgresql13","description":"This update for postgresql13 fixes the following issues:\n\nUpgrade to version 13.2:\n\n- Updating stored views and reindexing might be needed after applying this update.\n- CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages.\n- CVE-2021-20229, bsc#1182039: Fix failure to check per-column SELECT privileges in some join queries.\n","status":"published","published":"2021-02-22T12:55:24Z","modified":"2026-02-04T02:15:12.458625Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0695-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n\nUpgrade to version 12.6:\n\n- Reindexing might be needed after applying this update.\n- CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages.\n","status":"published","published":"2021-03-03T17:16:41Z","modified":"2026-02-04T03:14:27.436346Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:1783-1","title":"Security update for postgresql12","description":"This update for postgresql12 fixes the following issues:\n\n- Upgrade to version 12.7:\n- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).\n- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).\n- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING 'pg_psql_temporary_savepoint' does not exist (bsc#1185926).\n- CVE-2021-3393: Fixed information leakage in constraint-violation error messages (bsc#1182040).\n\n- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).\n- Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118).\n- Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945).\n","status":"published","published":"2021-05-27T14:35:18Z","modified":"2026-02-04T02:16:16.237522Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4735-1","title":"postgresql-12 vulnerability","description":"Heikki Linnakangas discovered that PostgreSQL incorrectly leaked values of\ndenied columns when handling certain errors. A remote attacker could\npossibly use this issue to obtain sensitive information.\n","status":"published","published":"2021-02-15T12:02:06Z","modified":"2026-04-22T10:11:33.578655Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}