SUSE-SU-2023:2199-1: postgresql12&distro=openSUSE Leap 15.4
Vulnerability summary
SUSE-SU-2023:2199-1 is a vulnerability in postgresql12&distro=openSUSE Leap 15.4 with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 15-05-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for postgresql12 This update for postgresql12 fixes the following issues: Updated to version 12.15: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). - CVE-2023-2455: Fixed an issue that could allow a user to see or modify rows that should have been invisible (bsc#1211229). - Internal fixes (bsc#1210303).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse9 products
- postgresql12&distro=SUSE Enterprise Storage 7< 12.15-150200.8.44.1
- postgresql12&distro=SUSE Enterprise Storage 7.1< 12.15-150200.8.44.1
- postgresql12&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 12.15-150200.8.44.1
- postgresql12&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS< 12.15-150200.8.44.1
- postgresql12&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 12.15-150200.8.44.1
Opensuse1 product
- postgresql12&distro=openSUSE Leap 15.4< 12.15-150200.8.44.1
2 vendors · 10 products