Red Hat Security Advisory: postgresql:10 security update

Fixed packages 25

Vulnerabilities 9

• High 7.5
  CVE-2019-10164

  PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any…

  PostgreSQL postgresql postgresql15 postgresql-10 Ubuntu Alpine
  Jun 26, 2019
• High 7.5
  CVE-2019-10208

  A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before…

  PostgreSQL postgresql postgresql15 postgresql-9.3 Ubuntu Alpine
  Oct 29, 2019
• Low 3.1
  CVE-2019-10130

  A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, exc…

  PostgreSQL postgresql postgresql15 postgresql-9.5 Ubuntu Alpine
  Jul 30, 2019
• Low 3.1
  CVE-2020-1720

  A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization che…

  Red Hat postgresql postgresql15 postgresql-10 Ubuntu Alpine
  Mar 17, 2020
• Unscored —
  CVE-2020-14349

  It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_pa…

  postgresql15 postgresql-10 postgresql-12 postgresql14 Ubuntu Alpine
  Aug 24, 2020
• Unscored —
  CVE-2020-14350

  It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker w…

  postgresql15 postgresql-9.3 postgresql-9.5 postgresql-10 Ubuntu Alpine
  Aug 24, 2020
• Unscored —
  CVE-2020-25694

  A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before …

  postgresql15 postgresql-9.3 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine
  Nov 16, 2020
• Unscored —
  CVE-2020-25695 EPSS 46%

  A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before …

  postgresql15 postgresql-9.3 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine
  Nov 16, 2020
• Unscored —
  CVE-2020-25696

  A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, bef…

  postgresql15 postgresql-9.3 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine
  Nov 23, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1707109
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1719698
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1734416
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1798852
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1865744
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1865746
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1894423
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1894425
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1894430
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5664.json
• report
  https://access.redhat.com/security/cve/CVE-2019-10130
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-10130
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-10130
• article
  https://www.postgresql.org/about/news/1939/
• report
  https://access.redhat.com/security/cve/CVE-2019-10164
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-10164
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-10164
• article
  https://www.postgresql.org/support/security/
• report
  https://access.redhat.com/security/cve/CVE-2019-10208
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-10208
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-10208
• article
  https://www.postgresql.org/about/news/1960/
• report
  https://access.redhat.com/security/cve/CVE-2020-1720
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-1720
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-1720
• report
  https://access.redhat.com/security/cve/CVE-2020-14349
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14349
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14349
• report
  https://access.redhat.com/security/cve/CVE-2020-14350
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14350
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14350
• report
  https://access.redhat.com/security/cve/CVE-2020-25694
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25694
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25694
• article
  https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/
• report
  https://access.redhat.com/security/cve/CVE-2020-25695
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25695
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25695