- Vulnerability/
- RHSA-2020:5620
17/12/2020
RHSA-2020:5620: Important: postgresql:12 security update
First published: Thu Dec 17 2020(Updated: )
PostgreSQL is an advanced object-relational database management system (DBMS).<br>The following packages have been upgraded to a later upstream version: postgresql (12.5).<br>Security Fix(es):<br><li> postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)</li> <li> postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695)</li> <li> postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)</li> <li> postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)</li> <li> postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)</li> <li> postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/pgaudit | <1.4.0-4.module+el8.3.0+9042+664538f4 | 1.4.0-4.module+el8.3.0+9042+664538f4 |
| redhat/postgres-decoderbufs | <0.10.0-2.module+el8.3.0+9042+664538f4 | 0.10.0-2.module+el8.3.0+9042+664538f4 |
| redhat/postgresql | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-test-rpm-macros | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/pgaudit | <1.4.0-4.module+el8.3.0+9042+664538f4 | 1.4.0-4.module+el8.3.0+9042+664538f4 |
| redhat/pgaudit-debuginfo | <1.4.0-4.module+el8.3.0+9042+664538f4 | 1.4.0-4.module+el8.3.0+9042+664538f4 |
| redhat/pgaudit-debugsource | <1.4.0-4.module+el8.3.0+9042+664538f4 | 1.4.0-4.module+el8.3.0+9042+664538f4 |
| redhat/postgres-decoderbufs | <0.10.0-2.module+el8.3.0+9042+664538f4 | 0.10.0-2.module+el8.3.0+9042+664538f4 |
| redhat/postgres-decoderbufs-debuginfo | <0.10.0-2.module+el8.3.0+9042+664538f4 | 0.10.0-2.module+el8.3.0+9042+664538f4 |
| redhat/postgres-decoderbufs-debugsource | <0.10.0-2.module+el8.3.0+9042+664538f4 | 0.10.0-2.module+el8.3.0+9042+664538f4 |
| redhat/postgresql | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-contrib | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-contrib-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-debugsource | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-docs | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-docs-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plperl | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plperl-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plpython3 | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plpython3-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-pltcl | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-pltcl-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server-devel | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server-devel-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-static | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-test | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-test-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade-devel | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade-devel-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/pgaudit-debuginfo | <1.4.0-4.module+el8.3.0+9042+664538f4 | 1.4.0-4.module+el8.3.0+9042+664538f4 |
| redhat/pgaudit-debugsource | <1.4.0-4.module+el8.3.0+9042+664538f4 | 1.4.0-4.module+el8.3.0+9042+664538f4 |
| redhat/postgres-decoderbufs-debuginfo | <0.10.0-2.module+el8.3.0+9042+664538f4 | 0.10.0-2.module+el8.3.0+9042+664538f4 |
| redhat/postgres-decoderbufs-debugsource | <0.10.0-2.module+el8.3.0+9042+664538f4 | 0.10.0-2.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-contrib | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-contrib-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-debugsource | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-docs | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-docs-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plperl | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plperl-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plpython3 | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plpython3-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-pltcl | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-pltcl-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server-devel | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server-devel-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-static | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-test | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-test-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade-devel | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade-devel-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/pgaudit | <1.4.0-4.module+el8.3.0+9042+664538f4 | 1.4.0-4.module+el8.3.0+9042+664538f4 |
| redhat/pgaudit-debuginfo | <1.4.0-4.module+el8.3.0+9042+664538f4 | 1.4.0-4.module+el8.3.0+9042+664538f4 |
| redhat/pgaudit-debugsource | <1.4.0-4.module+el8.3.0+9042+664538f4 | 1.4.0-4.module+el8.3.0+9042+664538f4 |
| redhat/postgres-decoderbufs | <0.10.0-2.module+el8.3.0+9042+664538f4 | 0.10.0-2.module+el8.3.0+9042+664538f4 |
| redhat/postgres-decoderbufs-debuginfo | <0.10.0-2.module+el8.3.0+9042+664538f4 | 0.10.0-2.module+el8.3.0+9042+664538f4 |
| redhat/postgres-decoderbufs-debugsource | <0.10.0-2.module+el8.3.0+9042+664538f4 | 0.10.0-2.module+el8.3.0+9042+664538f4 |
| redhat/postgresql | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-contrib | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-contrib-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-debugsource | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-docs | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-docs-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plperl | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plperl-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plpython3 | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-plpython3-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-pltcl | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-pltcl-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server-devel | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-server-devel-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-static | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-test | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-test-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade-devel | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/postgresql-upgrade-devel-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4 | 12.5-1.module+el8.3.0+9042+664538f4 |
| redhat/pgaudit | <1.4.0-4.module+el8.3.0+9042+664538f4.aa | 1.4.0-4.module+el8.3.0+9042+664538f4.aa |
| redhat/pgaudit-debuginfo | <1.4.0-4.module+el8.3.0+9042+664538f4.aa | 1.4.0-4.module+el8.3.0+9042+664538f4.aa |
| redhat/pgaudit-debugsource | <1.4.0-4.module+el8.3.0+9042+664538f4.aa | 1.4.0-4.module+el8.3.0+9042+664538f4.aa |
| redhat/postgres-decoderbufs | <0.10.0-2.module+el8.3.0+9042+664538f4.aa | 0.10.0-2.module+el8.3.0+9042+664538f4.aa |
| redhat/postgres-decoderbufs-debuginfo | <0.10.0-2.module+el8.3.0+9042+664538f4.aa | 0.10.0-2.module+el8.3.0+9042+664538f4.aa |
| redhat/postgres-decoderbufs-debugsource | <0.10.0-2.module+el8.3.0+9042+664538f4.aa | 0.10.0-2.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-contrib | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-contrib-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-debugsource | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-docs | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-docs-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-plperl | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-plperl-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-plpython3 | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-plpython3-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-pltcl | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-pltcl-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-server | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-server-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-server-devel | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-server-devel-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-static | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-test | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-test-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-upgrade | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-upgrade-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-upgrade-devel | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
| redhat/postgresql-upgrade-devel-debuginfo | <12.5-1.module+el8.3.0+9042+664538f4.aa | 12.5-1.module+el8.3.0+9042+664538f4.aa |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1798852
- https://bugzilla.redhat.com/show_bug.cgi?id=1865744
- https://bugzilla.redhat.com/show_bug.cgi?id=1865746
- https://bugzilla.redhat.com/show_bug.cgi?id=1894423
- https://bugzilla.redhat.com/show_bug.cgi?id=1894425
- https://bugzilla.redhat.com/show_bug.cgi?id=1894430
- https://access.redhat.com/security/updates/classification/#important
- https://www.postgresql.org/docs/12/release-12-2.html
- https://www.postgresql.org/docs/12/release-12-3.html
- https://www.postgresql.org/docs/12/release-12-4.html
- https://www.postgresql.org/docs/12/release-12-5.html
- https://access.redhat.com/errata/RHSA-2020:5620 (Advisory)
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2020:5620
- agent/software-canonical-lookup
- package-manager/redhat