Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 516
Alerts This Week
Warning Icon 1 516

Ubuntu 20.04 & 20.10 USN-4735-1 Moderate: PostgreSQL Information Disclosure

ubuntu
Calendar Grey February 15, 2021
Dist Ubuntu Esm H88
Ubuntu's PostgreSQL setup can leak confidential information, making timely updates essential for safeguarding. Comprehensive security guidance included.
PostgreSQL could be made to expose sensitive information.

Summary

PostgreSQL could be made to expose sensitive information.

Software Description:

- postgresql-12: Object-relational SQL database

Details:

Heikki Linnakangas discovered that PostgreSQL incorrectly leaked values of

denied columns when handling certain errors. A remote attacker could

possibly use this issue to obtain sensitive information.

Topics%20covered

Topics Covered

security advisory moderate information leak update software update remote attack Ubuntu PostgreSQL error handling

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  postgresql-12                   12.6-0ubuntu0.20.10.1

Ubuntu 20.04 LTS:
  postgresql-12                   12.6-0ubuntu0.20.04.1

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart PostgreSQL to
make all the necessary changes.

References

CVE-2021-3393

Severity
important
Lowest
Low
Medium
High
Critical

February 15, 2021

Topics%20covered

Topics Covered

security advisory moderate information leak update software update remote attack Ubuntu PostgreSQL error handling

Package Information

https://launchpad.net/ubuntu/+source/postgresql-12/12.6-0ubuntu0.20.10.1
https://launchpad.net/ubuntu/+source/postgresql-12/12.6-0ubuntu0.20.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.