(RHSA-2021:0163) Important: postgresql:12 security update

2021-01-1809:18:11

access.redhat.com

177

0.026 Low

EPSS

Percentile

90.3%

JSON

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (12.5).

Security Fix(es):

postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)
postgresql: Multiple features escape “security restricted operation” sandbox (CVE-2020-25695)
postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)
postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)
postgresql: psql’s \gset allows overwriting specially treated variables (CVE-2020-25696)
postgresql: ALTER … DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64postgresql-upgrade-devel-debuginfo< 12.5-1.module+el8.2.0+9043+1dbb5661postgresql-upgrade-devel-debuginfo-12.5-1.module+el8.2.0+9043+1dbb5661.aarch64.rpm
RedHatanyaarch64postgresql-pltcl-debuginfo< 12.5-1.module+el8.2.0+9043+1dbb5661postgresql-pltcl-debuginfo-12.5-1.module+el8.2.0+9043+1dbb5661.aarch64.rpm
RedHatanyppc64lepostgresql-plpython3-debuginfo< 12.5-1.module+el8.2.0+9043+1dbb5661postgresql-plpython3-debuginfo-12.5-1.module+el8.2.0+9043+1dbb5661.ppc64le.rpm
RedHatanys390xpostgresql-contrib< 12.5-1.module+el8.2.0+9043+1dbb5661postgresql-contrib-12.5-1.module+el8.2.0+9043+1dbb5661.s390x.rpm
RedHatanyppc64lepostgresql-test< 12.5-1.module+el8.2.0+9043+1dbb5661postgresql-test-12.5-1.module+el8.2.0+9043+1dbb5661.ppc64le.rpm
RedHatanyppc64lepostgresql-debuginfo< 12.5-1.module+el8.2.0+9043+1dbb5661postgresql-debuginfo-12.5-1.module+el8.2.0+9043+1dbb5661.ppc64le.rpm
RedHatanys390xpgaudit< 1.4.0-4.module+el8.2.0+9043+1dbb5661pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.s390x.rpm
RedHatanyx86_64postgresql-plpython3< 12.5-1.module+el8.2.0+9043+1dbb5661postgresql-plpython3-12.5-1.module+el8.2.0+9043+1dbb5661.x86_64.rpm
RedHatanyaarch64postgresql-docs< 12.5-1.module+el8.2.0+9043+1dbb5661postgresql-docs-12.5-1.module+el8.2.0+9043+1dbb5661.aarch64.rpm
RedHatanyaarch64pgaudit< 1.4.0-4.module+el8.2.0+9043+1dbb5661pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	postgresql-upgrade-devel-debuginfo	< 12.5-1.module+el8.2.0+9043+1dbb5661	postgresql-upgrade-devel-debuginfo-12.5-1.module+el8.2.0+9043+1dbb5661.aarch64.rpm
RedHat	any	aarch64	postgresql-pltcl-debuginfo	< 12.5-1.module+el8.2.0+9043+1dbb5661	postgresql-pltcl-debuginfo-12.5-1.module+el8.2.0+9043+1dbb5661.aarch64.rpm
RedHat	any	ppc64le	postgresql-plpython3-debuginfo	< 12.5-1.module+el8.2.0+9043+1dbb5661	postgresql-plpython3-debuginfo-12.5-1.module+el8.2.0+9043+1dbb5661.ppc64le.rpm
RedHat	any	s390x	postgresql-contrib	< 12.5-1.module+el8.2.0+9043+1dbb5661	postgresql-contrib-12.5-1.module+el8.2.0+9043+1dbb5661.s390x.rpm
RedHat	any	ppc64le	postgresql-test	< 12.5-1.module+el8.2.0+9043+1dbb5661	postgresql-test-12.5-1.module+el8.2.0+9043+1dbb5661.ppc64le.rpm
RedHat	any	ppc64le	postgresql-debuginfo	< 12.5-1.module+el8.2.0+9043+1dbb5661	postgresql-debuginfo-12.5-1.module+el8.2.0+9043+1dbb5661.ppc64le.rpm
RedHat	any	s390x	pgaudit	< 1.4.0-4.module+el8.2.0+9043+1dbb5661	pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.s390x.rpm
RedHat	any	x86_64	postgresql-plpython3	< 12.5-1.module+el8.2.0+9043+1dbb5661	postgresql-plpython3-12.5-1.module+el8.2.0+9043+1dbb5661.x86_64.rpm
RedHat	any	aarch64	postgresql-docs	< 12.5-1.module+el8.2.0+9043+1dbb5661	postgresql-docs-12.5-1.module+el8.2.0+9043+1dbb5661.aarch64.rpm
RedHat	any	aarch64	pgaudit	< 1.4.0-4.module+el8.2.0+9043+1dbb5661	pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.aarch64.rpm