Red Hat Security Advisory

RHSA-2020:5112

rh-postgresql12-postgresql security update

Released 2020-11-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql12-postgresql-12.4-1.el7, rh-postgresql12-postgresql-contrib-12.4-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.4-1.el7 +11
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-postgresql12-postgresql-12.4-1.el7, rh-postgresql12-postgresql-contrib-12.4-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.4-1.el7 +11
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-postgresql12-postgresql-12.4-1.el7, rh-postgresql12-postgresql-contrib-12.4-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.4-1.el7 +11
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql12-postgresql-12.4-1.el7, rh-postgresql12-postgresql-contrib-12.4-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.4-1.el7 +11

TI-2020-11220 CVE-2020-14349 · GHSA-2783-h34h-q54q

LOW 36

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.02235 Published 2020-08-24 Partial fix CWE-427

TI-2020-11221 CVE-2020-14350 · GHSA-6v9v-3f4c-cjgx

LOW 33

It was found that some PostgreSQL extensions did not use search_path safely in their installation script.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00532 Published 2020-08-24 Partial fix CWE-426

TI-2020-01664 CVE-2020-1720 · GHSA-prcp-93mm-93fm

LOW 31

A flaw was found in PostgreSQL's "ALTER ...

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01183 Published 2020-03-17 Fixed CWE-285