- Vulnerability/
- RHSA-2021:0163
18/1/2021
3/3/2024
RHSA-2021:0163: Important: postgresql:12 security update
First published: Mon Jan 18 2021(Updated: )
PostgreSQL is an advanced object-relational database management system (DBMS).<br>The following packages have been upgraded to a later upstream version: postgresql (12.5).<br>Security Fix(es):<br><li> postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)</li> <li> postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695)</li> <li> postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)</li> <li> postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)</li> <li> postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)</li> <li> postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/pgaudit | <1.4.0-4.module+el8.2.0+9043+1dbb5661 | 1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| redhat/postgres-decoderbufs | <0.10.0-2.module+el8.2.0+9043+1dbb5661 | 0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-test-rpm-macros | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/pgaudit | <1.4.0-4.module+el8.2.0+9043+1dbb5661 | 1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| redhat/pgaudit-debuginfo | <1.4.0-4.module+el8.2.0+9043+1dbb5661 | 1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| redhat/pgaudit-debugsource | <1.4.0-4.module+el8.2.0+9043+1dbb5661 | 1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| redhat/postgres-decoderbufs | <0.10.0-2.module+el8.2.0+9043+1dbb5661 | 0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| redhat/postgres-decoderbufs-debuginfo | <0.10.0-2.module+el8.2.0+9043+1dbb5661 | 0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| redhat/postgres-decoderbufs-debugsource | <0.10.0-2.module+el8.2.0+9043+1dbb5661 | 0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-contrib | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-contrib-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-debugsource | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-docs | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-docs-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plperl | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plperl-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plpython3 | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plpython3-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-pltcl | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-pltcl-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server-devel | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server-devel-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-static | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-test | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-test-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade-devel | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade-devel-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/pgaudit-debuginfo | <1.4.0-4.module+el8.2.0+9043+1dbb5661 | 1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| redhat/pgaudit-debugsource | <1.4.0-4.module+el8.2.0+9043+1dbb5661 | 1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| redhat/postgres-decoderbufs-debuginfo | <0.10.0-2.module+el8.2.0+9043+1dbb5661 | 0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| redhat/postgres-decoderbufs-debugsource | <0.10.0-2.module+el8.2.0+9043+1dbb5661 | 0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-contrib | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-contrib-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-debugsource | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-docs | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-docs-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plperl | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plperl-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plpython3 | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plpython3-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-pltcl | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-pltcl-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server-devel | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server-devel-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-static | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-test | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-test-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade-devel | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade-devel-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/pgaudit | <1.4.0-4.module+el8.2.0+9043+1dbb5661 | 1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| redhat/pgaudit-debuginfo | <1.4.0-4.module+el8.2.0+9043+1dbb5661 | 1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| redhat/pgaudit-debugsource | <1.4.0-4.module+el8.2.0+9043+1dbb5661 | 1.4.0-4.module+el8.2.0+9043+1dbb5661 |
| redhat/postgres-decoderbufs | <0.10.0-2.module+el8.2.0+9043+1dbb5661 | 0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| redhat/postgres-decoderbufs-debuginfo | <0.10.0-2.module+el8.2.0+9043+1dbb5661 | 0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| redhat/postgres-decoderbufs-debugsource | <0.10.0-2.module+el8.2.0+9043+1dbb5661 | 0.10.0-2.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-contrib | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-contrib-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-debugsource | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-docs | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-docs-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plperl | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plperl-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plpython3 | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-plpython3-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-pltcl | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-pltcl-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server-devel | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-server-devel-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-static | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-test | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-test-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade-devel | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/postgresql-upgrade-devel-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661 | 12.5-1.module+el8.2.0+9043+1dbb5661 |
| redhat/pgaudit | <1.4.0-4.module+el8.2.0+9043+1dbb5661.aa | 1.4.0-4.module+el8.2.0+9043+1dbb5661.aa |
| redhat/pgaudit-debuginfo | <1.4.0-4.module+el8.2.0+9043+1dbb5661.aa | 1.4.0-4.module+el8.2.0+9043+1dbb5661.aa |
| redhat/pgaudit-debugsource | <1.4.0-4.module+el8.2.0+9043+1dbb5661.aa | 1.4.0-4.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgres-decoderbufs | <0.10.0-2.module+el8.2.0+9043+1dbb5661.aa | 0.10.0-2.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgres-decoderbufs-debuginfo | <0.10.0-2.module+el8.2.0+9043+1dbb5661.aa | 0.10.0-2.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgres-decoderbufs-debugsource | <0.10.0-2.module+el8.2.0+9043+1dbb5661.aa | 0.10.0-2.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-contrib | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-contrib-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-debugsource | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-docs | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-docs-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-plperl | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-plperl-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-plpython3 | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-plpython3-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-pltcl | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-pltcl-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-server | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-server-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-server-devel | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-server-devel-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-static | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-test | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-test-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-upgrade | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-upgrade-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-upgrade-devel | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
| redhat/postgresql-upgrade-devel-debuginfo | <12.5-1.module+el8.2.0+9043+1dbb5661.aa | 12.5-1.module+el8.2.0+9043+1dbb5661.aa |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2021:0163?
The severity of RHSA-2021:0163 is classified as important.
How do I fix RHSA-2021:0163?
To fix RHSA-2021:0163, upgrade your PostgreSQL package to version 12.5 or later.
What are the affected packages in RHSA-2021:0163?
The affected packages include postgresql, pgaudit, and postgres-decoderbufs among others.
What vulnerabilities are addressed by RHSA-2021:0163?
RHSA-2021:0163 addresses the vulnerability CVE-2020-25694 related to reconnection and connection security downgrades.
When was RHSA-2021:0163 released?
RHSA-2021:0163 was released on March 9, 2021.
- agent/severity
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/title
- agent/description
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2021:0163
- agent/software-canonical-lookup
- agent/references
- agent/remedy
- agent/tags
- agent/event
- agent/source
- package-manager/redhat