[SECURITY] [DLA 3651-1] postgresql-11 security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3651-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
November 14, 2023 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : postgresql-11
Version : 11.22-0+deb10u1
CVE ID : CVE-2023-5868 CVE-2023-5869 CVE-2023-5870
Several vulnerabilities have been discovered in the PostgreSQL
database system.
CVE-2023-5868
Jingzhou Fu discovered a memory disclosure flaw in aggregate
function calls.
CVE-2023-5869
Pedro Gallegos reported integer overflow flaws resulting in buffer
overflows in the array modification functions.
CVE-2023-5870
Hemanth Sandrana and Mahendrakar Srinivasarao reported that the
pg_cancel_backend role can signal certain superuser processes,
potentially resulting in denial of service.
For Debian 10 buster, these problems have been fixed in version
11.22-0+deb10u1.
We recommend that you upgrade your postgresql-11 packages.
For the detailed security status of postgresql-11 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/postgresql-11
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=qtSE
-----END PGP SIGNATURE-----
Reply to: