[Git][security-tracker-team/security-tracker][master] Add two new postgresql CVEs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2bcd18c6 by Salvatore Bonaccorso at 2023-05-11T16:41:50+02:00
Add two new postgresql CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,13 @@
+CVE-2023-2455 [Row security policies disregard user ID changes after inlining]
+	- postgresql-15 <unfixed>
+	- postgresql-13 <removed>
+	- postgresql-11 <removed>
+	NOTE: https://www.postgresql.org/about/news/postgresql-153-148-1311-1215-and-1120-released-2637/
+CVE-2023-2454 [CREATE SCHEMA ... schema_element defeats protective search_path changes]
+	- postgresql-15 <unfixed>
+	- postgresql-13 <removed>
+	- postgresql-11 <removed>
+	NOTE: https://www.postgresql.org/about/news/postgresql-153-148-1311-1215-and-1120-released-2637/
 CVE-2023-32668 (LuaTeX before 1.17.0 enables the socket library by default.)
 	TODO: check
 CVE-2023-32080 (Wings is the server control plane for Pterodactyl Panel. A vulnerabili ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2bcd18c6c8c0d430902d3e445851a9c21e50c8d2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2bcd18c6c8c0d430902d3e445851a9c21e50c8d2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230511/2966283c/attachment.htm>