Medium ELSA-2020-3669 6 CVEs

Moderate: postgresql:10 security and bug fix update (Oracle Linux 8)

Published Sep 9, 2020 · Updated Sep 9, 2020

Ecosystem: Oracle Linux

Summary

[10.14-1]
- Rebase to upstream release 10.14
Fixes RHBZ#1727803
Fixes RHBZ#1741489
Fixes RHBZ#1709196

[10.13-1]
- Rebase to upstream release 10.13
Fixes RHBZ#1727803
Fixes RHBZ#1741489
Fixes RHBZ#1709196

Fixed packages 13

Release	Package	Fixed in
Oracle Linux · 8	postgresql	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-contrib	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-docs	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-plperl	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-plpython3	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-pltcl	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-server	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-server-devel	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-static	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-test	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-test-rpm-macros	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-upgrade	0:10.14-1.module+el8.2.0+7785+0ea9f177
Oracle Linux · 8	postgresql-upgrade-devel	0:10.14-1.module+el8.2.0+7785+0ea9f177

Vulnerabilities 6

High 7.5

CVE-2019-10164

PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any…

PostgreSQL postgresql postgresql15 postgresql-10 Ubuntu Alpine

Jun 26, 2019
High 7.5

CVE-2019-10208

A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before…

PostgreSQL postgresql postgresql-9.3 postgresql15 Ubuntu Alpine

Oct 29, 2019
Low 3.1

CVE-2019-10130

A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, exc…

PostgreSQL postgresql postgresql15 postgresql-9.5 Ubuntu Alpine

Jul 30, 2019
Low 3.1

CVE-2020-1720

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization che…

Red Hat postgresql postgresql15 postgresql-10 Ubuntu Alpine

Mar 17, 2020
Unscored —

CVE-2020-14349

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_pa…

postgresql15 postgresql-10 postgresql-12 postgresql14 Ubuntu Alpine

Aug 24, 2020
Unscored —

CVE-2020-14350

It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker w…

postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Ubuntu Alpine

Aug 24, 2020