Important: rh-postgresql10-postgresql security update (Oracle Linux 7)

Summary

Fixed packages 14

Vulnerabilities 10

• High 7.5
  CVE-2019-10164

  PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any…

  PostgreSQL postgresql postgresql15 postgresql-10 Ubuntu Alpine
  Jun 26, 2019
• High 7.5
  CVE-2019-10208

  A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before…

  PostgreSQL postgresql postgresql15 postgresql-9.3 Ubuntu Alpine
  Oct 29, 2019
• Medium 6.5
  CVE-2019-10129

  A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned ta…

  PostgreSQL postgresql postgresql15 postgresql14 Alpine
  Jul 30, 2019
• Low 3.1
  CVE-2019-10130

  A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, exc…

  PostgreSQL postgresql postgresql15 postgresql-9.5 Ubuntu Alpine
  Jul 30, 2019
• Low 3.1
  CVE-2020-1720

  A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization che…

  Red Hat postgresql postgresql15 postgresql-10 Ubuntu Alpine
  Mar 17, 2020
• Unscored —
  CVE-2020-14349

  It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_pa…

  postgresql15 postgresql-10 postgresql-12 postgresql14 Ubuntu Alpine
  Aug 24, 2020
• Unscored —
  CVE-2020-14350

  It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker w…

  postgresql15 postgresql-9.3 postgresql-9.5 postgresql-10 Ubuntu Alpine
  Aug 24, 2020
• Unscored —
  CVE-2020-25694

  A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before …

  postgresql15 postgresql-9.3 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine
  Nov 16, 2020
• Unscored —
  CVE-2020-25695 EPSS 46%

  A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before …

  postgresql15 postgresql-9.3 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine
  Nov 16, 2020
• Unscored —
  CVE-2020-25696

  A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, bef…

  postgresql15 postgresql-9.3 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine
  Nov 23, 2020