#15040 closed enhancement (fixed)
postgresql-13.3
Reported by: | Bruce Dubbs | Owned by: | Bruce Dubbs |
---|---|---|---|
Priority: | normal | Milestone: | 11.0 |
Component: | BOOK | Version: | git |
Severity: | normal | Keywords: | |
Cc: |
Description ¶
New minor version.
Change History (5)
comment:1 by , 4 years ago
Owner: | changed from | to
---|---|
Status: | new → assigned |
comment:2 by , 4 years ago
comment:3 by , 4 years ago
Resolution: | → fixed |
---|---|
Status: | assigned → closed |
Fixed at commit 33a1bb9b9d101b22f15ca37251b49cfad94ab670
comment:4 by , 4 years ago
Contains three security fixes:
CVE-2021-32039: Memory disclosure in partitioned-table UPDATE... RETURNING
Marked at 6.5 (Medium)
CVE-2021-32028: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE
Marked at 6.5 (Medium)
CVE-2021-32027: Buffer overrun from integer overflow in array subscripting calculations
Marked at 6.5 (Medium)
Link to the advisories can be found here:
https://www.postgresql.org/about/news/postgresql-133-127-1112-1017-and-9622-released-2210/
Note:
See TracTickets
for help on using tickets.
Release notes are at https://www.postgresql.org/docs/release/13.3/