Red Hat Security Advisory: rh-postgresql96-postgresql security update

Fixed packages 30

Vulnerabilities 7

• High 8.5
  CVE-2018-10915

  A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its inte…

  PostgreSQL Global Development Group PostgreSQL postgresql15 postgresql-9.3 Ubuntu Alpine
  Aug 9, 2018
• High 7.1
  CVE-2018-10925

  It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check aut…

  PostgreSQL Global Development Group PostgreSQL postgresql15 postgresql-9.5 Ubuntu Alpine
  Aug 9, 2018
• Medium 4.2
  CVE-2018-1115

  postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() fun…

  postgresql15 postgresql-10 postgresql14 postgresql Ubuntu Alpine
  May 10, 2018
• Unscored —
  CVE-2017-15098

  Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before…

  Red Hat postgresql postgresql15 postgresql-9.3 Ubuntu Alpine
  Nov 22, 2017
• Unscored —
  CVE-2017-15099

  INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 d…

  Red Hat postgresql postgresql15 postgresql-9.5 Ubuntu Alpine
  Nov 22, 2017
• Unscored —
  CVE-2018-1053

  In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, p…

  The PostgreSQL Global Development Group PostgreSQL postgresql15 postgresql-9.3 Ubuntu Alpine
  Feb 9, 2018
• Unscored —
  CVE-2018-1058 Public exploit EPSS 13%

  A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker wi…

  The PostgreSQL Global Development Group PostgreSQL postgresql15 postgresql-9.3 Ubuntu Alpine
  Mar 2, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1508820
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1508823
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1539619
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1547044
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1573276
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1609891
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1612619
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2566.json
• report
  https://access.redhat.com/security/cve/CVE-2017-15098
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-15098
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-15098
• article
  https://www.postgresql.org/about/news/1801/
• report
  https://access.redhat.com/security/cve/CVE-2017-15099
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-15099
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-15099
• report
  https://access.redhat.com/security/cve/CVE-2018-1053
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1053
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1053
• article
  https://www.postgresql.org/about/news/1829/
• report
  https://access.redhat.com/security/cve/CVE-2018-1058
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1058
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1058
• article
  https://www.postgresql.org/about/news/1834/
• report
  https://access.redhat.com/security/cve/CVE-2018-1115
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1115
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1115
• report
  https://access.redhat.com/security/cve/CVE-2018-10915
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10915
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10915
• article
  https://www.postgresql.org/about/news/1878/
• report
  https://access.redhat.com/security/cve/CVE-2018-10925
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10925
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10925