RHSA-2020:5110: Moderate: rh-postgresql10-postgresql security update
Published Nov 16, 2020
·Updated
PostgreSQL is an advanced object-relational database management system (DBMS).<br>The following packages have been upgraded to a later upstream version: rh-postgresql10-postgresql (10.14).<br>Security Fix(es):<br><li> postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)</li> <li> postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
60 affected componentsFixes available
redhat/rh-postgresql10-postgresql<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-contrib<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-contrib-syspaths<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-debuginfo<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-devel<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-docs<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-libs<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-plperl<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-plpython<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-pltcl<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-server<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-server-syspaths<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-static<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-syspaths<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-test<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-contrib<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-contrib-syspaths<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-debuginfo<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-devel<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-docs<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-libs<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-plperl<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-plpython<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-pltcl<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-server<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-server-syspaths<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-static<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-syspaths<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-test<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-contrib<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-contrib-syspaths<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-debuginfo<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-devel<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-docs<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-libs<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-plperl<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-plpython<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-pltcl<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-server<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-server-syspaths<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-static<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-syspaths<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql-test<10.14-1.el7
10.14-1.el7
redhat/rh-postgresql10-postgresql<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-contrib<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-contrib-syspaths<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-debuginfo<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-devel<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-docs<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-libs<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-plperl<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-plpython<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-pltcl<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-server<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-server-syspaths<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-static<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-syspaths<10.14-1.el7.aa
10.14-1.el7.aa
redhat/rh-postgresql10-postgresql-test<10.14-1.el7.aa
10.14-1.el7.aa
Remediation
Event History
Jun 20, 2024
Advisory Published
via Red Hat·01:20 AM
Frequently Asked Questions
1
What is the severity of RHSA-2020:5110?
The severity of RHSA-2020:5110 is classified as moderate.
2
How do I fix RHSA-2020:5110?
To fix RHSA-2020:5110, upgrade the affected packages to version 10.14-1.el7 or later.
3
What impact does RHSA-2020:5110 have on PostgreSQL?
RHSA-2020:5110 addresses an uncontrolled search path element vulnerability in PostgreSQL that could lead to potential security risks.
4
Which packages are affected by RHSA-2020:5110?
Affected packages include rh-postgresql10-postgresql and its associated components like contrib, server, and devel.
5
Is there a workaround for RHSA-2020:5110?
Currently, the recommended action is to upgrade to the latest version rather than relying on a workaround.