Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-contrib | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-contrib-syspaths | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-debuginfo | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-devel | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-docs | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-libs | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-plperl | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-plpython | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-pltcl | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-server | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-server-syspaths | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-static | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-syspaths | 0:9.6.19-1.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql96-postgresql-test | 0:9.6.19-1.el7 |
Vulnerabilities 4
-
High 7.5
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before…
-
Low 3.1
A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, exc…
-
Low 3.1
A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization che…
-
Unscored —
It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker w…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1707109
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1734416
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1798852
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1865746
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4295.json
-
report
https://access.redhat.com/security/cve/CVE-2019-10130
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10130
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10130
-
article
https://www.postgresql.org/about/news/1939/
-
report
https://access.redhat.com/security/cve/CVE-2019-10208
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10208
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10208
-
article
https://www.postgresql.org/about/news/1960/
-
report
https://access.redhat.com/security/cve/CVE-2020-1720
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-1720
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-1720
-
report
https://access.redhat.com/security/cve/CVE-2020-14350
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14350
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14350