Important: postgresql:10 security update

2020-12-1608:03:04

errata.almalinux.org

0.026 Low

EPSS

Percentile

90.3%

JSON

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (10.15).

Security Fix(es):

postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)
postgresql: Multiple features escape “security restricted operation” sandbox (CVE-2020-25695)
postgresql: psql’s \gset allows overwriting specially treated variables (CVE-2020-25696)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8x86_64postgresql< 10.15-1.module_el8.3.0+2030+1ca16b1fpostgresql-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux8x86_64postgresql-contrib< 10.15-1.module_el8.3.0+2030+1ca16b1fpostgresql-contrib-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux8x86_64postgresql-docs< 10.15-1.module_el8.3.0+2030+1ca16b1fpostgresql-docs-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux8x86_64postgresql-plperl< 10.15-1.module_el8.3.0+2030+1ca16b1fpostgresql-plperl-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux8x86_64postgresql-plpython3< 10.15-1.module_el8.3.0+2030+1ca16b1fpostgresql-plpython3-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux8x86_64postgresql-pltcl< 10.15-1.module_el8.3.0+2030+1ca16b1fpostgresql-pltcl-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux8x86_64postgresql-server< 10.15-1.module_el8.3.0+2030+1ca16b1fpostgresql-server-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux8x86_64postgresql-server-devel< 10.15-1.module_el8.3.0+2030+1ca16b1fpostgresql-server-devel-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux8x86_64postgresql-static< 10.15-1.module_el8.3.0+2030+1ca16b1fpostgresql-static-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux8x86_64postgresql-test< 10.15-1.module_el8.3.0+2030+1ca16b1fpostgresql-test-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	x86_64	postgresql	< 10.15-1.module_el8.3.0+2030+1ca16b1f	postgresql-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux	8	x86_64	postgresql-contrib	< 10.15-1.module_el8.3.0+2030+1ca16b1f	postgresql-contrib-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux	8	x86_64	postgresql-docs	< 10.15-1.module_el8.3.0+2030+1ca16b1f	postgresql-docs-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux	8	x86_64	postgresql-plperl	< 10.15-1.module_el8.3.0+2030+1ca16b1f	postgresql-plperl-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux	8	x86_64	postgresql-plpython3	< 10.15-1.module_el8.3.0+2030+1ca16b1f	postgresql-plpython3-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux	8	x86_64	postgresql-pltcl	< 10.15-1.module_el8.3.0+2030+1ca16b1f	postgresql-pltcl-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux	8	x86_64	postgresql-server	< 10.15-1.module_el8.3.0+2030+1ca16b1f	postgresql-server-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux	8	x86_64	postgresql-server-devel	< 10.15-1.module_el8.3.0+2030+1ca16b1f	postgresql-server-devel-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux	8	x86_64	postgresql-static	< 10.15-1.module_el8.3.0+2030+1ca16b1f	postgresql-static-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm
almalinux	8	x86_64	postgresql-test	< 10.15-1.module_el8.3.0+2030+1ca16b1f	postgresql-test-10.15-1.module_el8.3.0+2030+1ca16b1f.x86_64.rpm