Red Hat Security AdvisoryRHSA-2020:5110
rh-postgresql10-postgresql security update
Released 2020-11-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql10-postgresql-10.14-1.el7, rh-postgresql10-postgresql-contrib-10.14-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.14-1.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-postgresql10-postgresql-10.14-1.el7, rh-postgresql10-postgresql-contrib-10.14-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.14-1.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-postgresql10-postgresql-10.14-1.el7, rh-postgresql10-postgresql-contrib-10.14-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.14-1.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql10-postgresql-10.14-1.el7, rh-postgresql10-postgresql-contrib-10.14-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.14-1.el7 +11
Fixes 2 records
Priority LOW 36
It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.02235 · Published 2020-08-24 · Partial fix CWE-427
Priority LOW 33
It was found that some PostgreSQL extensions did not use search_path safely in their installation script.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00532 · Published 2020-08-24 · Partial fix CWE-426
