https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:12:42 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-61818 <p>pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_encoder as unrestricted text and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with partman_user access can store SQL rather than a function name, and the SQL executes with the privileges of the caller that invokes undo_partition(). The function is not part of the default background-worker path, which limits the automatic superuser escalation described by the related create-partition vulnerability, but a privileged caller can still have its available confidentiality, integrity, and availability permissions abused. This issue is fixed in version 5.5.0.</p> <p>pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_encoder as unrestricted text and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with partman_user access can store SQL rather than a function name, and the SQL executes with the privileges of the caller that invokes undo_partition(). The function is not part of the default background-worker path, which limits the automatic superuser escalation described by the related create-partition vulnerability, but a privileged caller can still have its available confidentiality, integrity, and availability permissions abused. This issue is fixed in version 5.5.0.</p> https://db.gcve.eu/vuln/fkie_cve-2026-61818 https://db.gcve.eu/vuln/ubuntu-cve-2026-61818 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pg-partman, Ubuntu:18.04:LTS: pg-partman, Ubuntu:20.04:LTS: pg-partman, Ubuntu:22.04:LTS: pg-partman, Ubuntu:24.04:LTS: pg-partman, Ubuntu:26.04:LTS: pg-partman</p> <p>pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_encoder as unrestricted text and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with partman_user access can store SQL rather than a function name, and the SQL executes with the privileges of the caller that invokes undo_partition(). The function is not part of the default background-worker path, which limits the automatic superuser escalation described by the related create-partition vulnerability, but a privileged caller can still have its available confidentiality, integrity, and availability permissions abused. This issue is fixed in version 5.5.0.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pg-partman, Ubuntu:18.04:LTS: pg-partman, Ubuntu:20.04:LTS: pg-partman, Ubuntu:22.04:LTS: pg-partman, Ubuntu:24.04:LTS: pg-partman, Ubuntu:26.04:LTS: pg-partman</p> <p>pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_encoder as unrestricted text and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with partman_user access can store SQL rather than a function name, and the SQL executes with the privileges of the caller that invokes undo_partition(). The function is not part of the default background-worker path, which limits the automatic superuser escalation described by the related create-partition vulnerability, but a privileged caller can still have its available confidentiality, integrity, and availability permissions abused. This issue is fixed in version 5.5.0.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-61818