Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-contrib | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-contrib-debuginfo | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-debuginfo | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-debugsource | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-docs | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-docs-debuginfo | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-plperl | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-plperl-debuginfo | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-plpython3 | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-plpython3-debuginfo | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-pltcl | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-pltcl-debuginfo | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-server | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-server-debuginfo | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-server-devel | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-server-devel-debuginfo | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-static | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-test | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-test-debuginfo | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream | postgresql-test-rpm-macros | 0:9.6.20-1.module+el8.2.0+8939+9a3b4b64 |
Vulnerabilities 7
-
High 7.5
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before…
-
Low 3.1
A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, exc…
-
Low 3.1
A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization che…
-
Unscored —
It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker w…
-
Unscored —
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before …
-
Unscored —CVE-2020-25695 EPSS 46%
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before …
-
Unscored —
A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, bef…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1707109
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1734416
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1798852
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1865746
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1894423
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1894425
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1894430
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0164.json
-
report
https://access.redhat.com/security/cve/CVE-2019-10130
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10130
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10130
-
article
https://www.postgresql.org/about/news/1939/
-
report
https://access.redhat.com/security/cve/CVE-2019-10208
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10208
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10208
-
article
https://www.postgresql.org/about/news/1960/
-
report
https://access.redhat.com/security/cve/CVE-2020-1720
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-1720
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-1720
-
report
https://access.redhat.com/security/cve/CVE-2020-14350
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-14350
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-14350
-
report
https://access.redhat.com/security/cve/CVE-2020-25694
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-25694
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-25694
-
article
https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/
-
report
https://access.redhat.com/security/cve/CVE-2020-25695
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-25695
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-25695
-
article
https://staaldraad.github.io/post/2020-12-15-cve-2020-25695-postgresql-privesc/
-
report
https://access.redhat.com/security/cve/CVE-2020-25696
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-25696
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-25696