FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

PostgreSQL -- Memory disclosure in partition routing

Affected packages
postgresql11-server < 11.3

Details

VuXML ID e66a5440-7258-11e9-b0e1-6cc21735f730
Discovery 2019-05-09
Entry 2019-05-09

The PostgreSQL project reports:

Prior to this release, a user running PostgreSQL 11 can read arbitrary bytes of server memory by executing a purpose-crafted INSERT statement to a partitioned table.

References

CVE Name CVE-2019-10129
URL https://www.postgresql.org/about/news/1939/