High ELSA-2021-2372 4 CVEs

Important: postgresql:12 security update (Oracle Linux 8)

Published Jun 11, 2021 · Updated Jun 11, 2021

Ecosystem: Oracle Linux

Summary

pgaudit
[1.4.0-6]
- Fix build requires

[1.4.0-5]
- Fix build requires

postgresql
[12.7-1]
- Update to 12.7
Resolves: #1964510
Fix: CVE-2021-32027,CVE-2021-32028

Fixed packages 15

Release	Package	Fixed in
Oracle Linux · 8	pgaudit	0:1.4.0-6.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgres-decoderbufs	0:0.10.0-2.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-contrib	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-docs	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-plperl	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-plpython3	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-pltcl	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-server	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-server-devel	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-static	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-test	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-test-rpm-macros	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-upgrade	0:12.7-1.module+el8.4.0+20191+2f8d0e59
Oracle Linux · 8	postgresql-upgrade-devel	0:12.7-1.module+el8.4.0+20191+2f8d0e59

Vulnerabilities 4

Unscored —

CVE-2021-32027

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. Whil…

postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine

Jun 1, 2021
Unscored —

CVE-2021-32028

A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an au…

postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine

Oct 11, 2021
Unscored —

CVE-2021-32029

A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated data…

postgresql-9.3 postgresql15 postgresql-12 postgresql14 Debian Ubuntu Alpine

Oct 8, 2021
Unscored —

CVE-2021-3393

An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having U…

postgresql15 postgresql-12 postgresql14 postgresql Debian Ubuntu Alpine

Apr 1, 2021