Red Hat Security AdvisoryRHSA-2020:0980
rh-postgresql10-postgresql security update
Released 2020-03-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql10-postgresql-10.12-2.el7, rh-postgresql10-postgresql-contrib-10.12-2.el7, rh-postgresql10-postgresql-contrib-syspaths-10.12-2.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-postgresql10-postgresql-10.12-2.el7, rh-postgresql10-postgresql-contrib-10.12-2.el7, rh-postgresql10-postgresql-contrib-syspaths-10.12-2.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-postgresql10-postgresql-10.12-2.el7, rh-postgresql10-postgresql-contrib-10.12-2.el7, rh-postgresql10-postgresql-contrib-syspaths-10.12-2.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-postgresql10-postgresql-10.12-2.el7, rh-postgresql10-postgresql-contrib-10.12-2.el7, rh-postgresql10-postgresql-contrib-syspaths-10.12-2.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql10-postgresql-10.12-2.el7, rh-postgresql10-postgresql-contrib-10.12-2.el7, rh-postgresql10-postgresql-contrib-syspaths-10.12-2.el7 +11
Fixes 4 records
Priority MEDIUM 44
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03643 · Published 2019-06-26 · Fixed CWE-121
Priority MEDIUM 42
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02188 · Published 2019-10-29 · Partial fix CWE-89
Priority LOW 31
A flaw was found in PostgreSQL's "ALTER ...
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01183 · Published 2020-03-17 · Fixed CWE-285
Priority LOW 22
A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01085 · Published 2019-07-30 · Partial fix CWE-284