Read the docs
Red Hat Security Advisory

RHSA-2020:5317

rh-postgresql12-postgresql security update

Released 2020-12-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2020-15711 CVE-2020-25695 · GHSA-xgxp-9x8p-gcw4

SQL injection in postgresql

Priority HIGH 68

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.4644 Published 2020-11-16 Partial fix CWE-89
TI-2020-15712 CVE-2020-25696 · GHSA-rfp5-6w27-jrq7

Incorrect comparison in PostgreSQL

Priority LOW 38

A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02698 Published 2020-11-23 Partial fix CWE-183
Priority LOW 38

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01593 Published 2020-11-16 Partial fix CWE-327