3.1
Low
CVE-2023-39418 A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row…
Description
A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user could store such rows.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 8.8 Extended Update Support 8080020231113134015.63 | earliest → < 8080020231113134015.63b34585 | 8080020231113134015.63b34585 |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.2 Extended Update Support 9020020231115020618 | earliest → < 9020020231115020618.rhel9 | 9020020231115020618.rhel9 |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Software Collections | Versions not published |
References
- RHSA-2023:7785 access.redhat.com
- RHSA-2023:7883 access.redhat.com
- RHSA-2023:7884 access.redhat.com
- RHSA-2023:7885 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2228112 bugzilla.redhat.com
- git.postgresql.org git.postgresql.org
- www.postgresql.org www.postgresql.org
Timeline
- Published
- Last modified
Other CVEs of Red Hat Enterprise Linux 8
The 1838 CVEs of Red Hat Enterprise Linux 8 →
CVE-2026-123151
Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
Not rated
CVE-2026-121997
Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch
8.1
High
CVE-2026-121996
Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
8.2
High
CVE-2026-121995
Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail
7.5
High