Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-contrib | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-contrib-syspaths | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-debuginfo | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-devel | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-docs | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-libs | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-plperl | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-plpython | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-pltcl | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-server | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-server-syspaths | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-static | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-syspaths | 0:10.12-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-test | 0:10.12-2.el7 |
Vulnerabilities 4
-
High 7.5
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any…
-
High 7.5
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before…
-
Low 3.1
A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, exc…
-
Low 3.1
A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization che…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1719698
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1798852
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1813210
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1813371
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0980.json
-
report
https://access.redhat.com/security/cve/CVE-2019-10130
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1707109
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10130
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10130
-
article
https://www.postgresql.org/about/news/1939/
-
report
https://access.redhat.com/security/cve/CVE-2019-10164
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10164
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10164
-
article
https://www.postgresql.org/support/security/
-
report
https://access.redhat.com/security/cve/CVE-2019-10208
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1734416
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10208
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10208
-
article
https://www.postgresql.org/about/news/1960/
-
report
https://access.redhat.com/security/cve/CVE-2020-1720
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-1720
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-1720