TI-2020-15711 CVE-2020-25695 · GHSA-xgxp-9x8p-gcw4
SQL injection in postgresql
Priority HIGH 68
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.
RHSA-2021:0163
postgresql:12 security update
Released 2021-01-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.aarch64::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.ppc64le::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.s390x::postgresql:12 +47
Fixes 6 records
TI-2020-15712 CVE-2020-25696 · GHSA-rfp5-6w27-jrq7
Incorrect comparison in PostgreSQL
Priority LOW 38
A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.
TI-2020-15710 CVE-2020-25694 · GHSA-vmm8-82m2-pcp5
Broken or risky cryptographic algorithm in postgresql
Priority LOW 38
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.
TI-2020-11220 CVE-2020-14349 · GHSA-2783-h34h-q54q
Uncontrolled search path in PostgreSQL
Priority LOW 36
It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication.
TI-2020-11221 CVE-2020-14350 · GHSA-6v9v-3f4c-cjgx
Untrusted search path in PostgreSQL
Priority LOW 33
It was found that some PostgreSQL extensions did not use search_path safely in their installation script.
TI-2020-01664 CVE-2020-1720 · GHSA-prcp-93mm-93fm
Improper authorization in Red Hat postgresql
Priority LOW 31
A flaw was found in PostgreSQL's "ALTER ...