| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | = 16.0≥ 11.0, < 11.22≥ 12.0, < 12.17≥ 13.0, < 13.13≥ 14.0, < 14.10≥ 15.0, < 15.5 | 11.2212.1713.1314.1015.5 |
| codeready linux builder eus | = 9.2 | |
| codeready linux builder eus for power little endian eus | = 9.0_ppc64le= 9.2_ppc64le | |
| codeready linux builder for arm64 eus | = 8.6_aarch64= 9.0_aarch64= 9.2_aarch64 | |
| codeready linux builder for ibm z systems eus | = 9.0_s390x= 9.2_s390x | |
| codeready linux builder for power little endian eus | = 9.0_ppc64le= 9.2_ppc64le | |
| software collections | = 1.0 |
A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free