Skip to content
OpenAdvisories
High SUSE-RU-2020:1280-1 2 CVEs

Recommended update for postgresql, postgresql10, postgresql12

Published May 14, 2020 · Updated Feb 4, 2026

Summary

This update for postgresql, postgresql10, postgresql12 fixes the following issues:

Changes in the postgresql wrapper package:

- Sync ownership of /run/postgresql in the file list with tmpfiles.
- Use the correct content for .bash_profile (bsc#1153168).
- Stop shipping SUSEfirewall2 config files (bsc#1151591).
- Use /run/postgresql instead of /var/run/postgresql in %ghost and
postgresql-tmpfiles.conf to avoid rpmlint warnings and errors.
- add /var/run/postgresql to the filelist. as %ghost for systemd
systems and directly for non systemd systems

Changes in postgresql10:

- packaging changed to no longer build the libraries,
these now come from postgresql12.

Changes in postgresql12:

Initial package for the postgresql 12 branch

https://www.postgresql.org/about/news/1976/

- Update to 12.2 (CVE-2020-1720)
https://www.postgresql.org/about/news/2011/
https://www.postgresql.org/docs/12/release-12-2.html

- Avoid the dependency from the devel package to the main package.
devel packages are exclusive, thus ecpg does not require
update-alternatives.

- Remove unused build dependencies from the client libs package:
LVM, icu, selinux, systemd.

- Update to 12.1

https://www.postgresql.org/docs/12/release-12-1.html
https://www.postgresql.org/about/news/1994/

- add requires to the server-devel package for the libs that are
returned by pg_config --libs

python-psycopg2 was updated to 2.8.4 to allow working with postgresql12.

Fixed packages 9

ReleasePackageFixed in
SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 postgresql 12-8.11.3
SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 postgresql10 10.12-8.13.9
SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 postgresql12 12.2-3.5.2
SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 postgresql12-libs 12.2-3.5.2
SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 python-psycopg2 2.8.4-5.4.6
SUSE · SLES 15 SP1 Linux Enterprise Module for Server Applications 15 SP1 postgresql 12-8.11.3
SUSE · SLES 15 SP1 Linux Enterprise Module for Server Applications 15 SP1 postgresql10 10.12-8.13.9
SUSE · SLES 15 SP1 Linux Enterprise Module for Server Applications 15 SP1 postgresql12 12.2-3.5.2
SUSE · SLES 15 SP1 Linux Enterprise Module for Server Applications 15 SP1 postgresql12-libs 12.2-3.5.2

Vulnerabilities 2

References

  • report
    https://bugzilla.suse.com/1138034
  • report
    https://bugzilla.suse.com/1151591
  • report
    https://bugzilla.suse.com/1153168
  • report
    https://bugzilla.suse.com/1163985
  • report
    https://bugzilla.suse.com/1167541
  • web
    https://www.suse.com/security/cve/CVE-2019-10164
  • web
    https://www.suse.com/security/cve/CVE-2020-1720