High ELSA-2021-1512 3 CVEs

Important: postgresql security update (Oracle Linux 7)

Published May 6, 2021 · Updated May 6, 2021

Ecosystem: Oracle Linux

Summary

[9.2.24-6]
- Patch fixing BZ#1741488 CVE-2019-10208

[9.2.24-5]
- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895

Fixed packages 12

Release	Package	Fixed in
Oracle Linux · 7	postgresql	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-contrib	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-devel	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-docs	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-libs	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-plperl	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-plpython	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-pltcl	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-server	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-static	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-test	0:9.2.24-6.el7_9
Oracle Linux · 7	postgresql-upgrade	0:9.2.24-6.el7_9

Vulnerabilities 3

High 7.5

CVE-2019-10208

A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before…

PostgreSQL postgresql postgresql-9.3 postgresql15 Ubuntu Alpine

Oct 29, 2019
Unscored —

CVE-2020-25694

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before …

postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine

Nov 16, 2020
Unscored —

CVE-2020-25695 EPSS 46%

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before …

postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine

Nov 16, 2020