Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2021-2022 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2021-0217-1.NASL
HistoryJan 27, 2021 - 12:00 a.m.

SUSE SLES12 Security Update : postgresql, postgresql12, postgresql13 (SUSE-SU-2021:0217-1)

2021-01-2700:00:00
This script is Copyright (C) 2021-2022 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
78
JSON

This update for postgresql, postgresql12, postgresql13 fixes the following issues :

Initial packaging of PostgreSQL 13 :

https://www.postgresql.org/about/news/2077/

https://www.postgresql.org/docs/13/release-13.html

Changes in postgresql :

Bump postgresql major version to 13.

Changes in postgresql12 :

%ghost the symlinks to pg_config and ecpg. (bsc#1178961)

BuildRequire libpq5 and libecpg6 when not building them to avoid dangling symlinks in the devel package. (bsc#1179765)

Fix a DST problem in the test suite.

Changes in postgresql13 :

Add postgresql-icu68.patch: fix build with ICU 68

%ghost the symlinks to pg_config and ecpg. (bsc#1178961)

BuildRequire libpq5 and libecpg6 when not building them to avoid dangling symlinks in the devel package. (bsc#1179765)

Upgrade to version 13.1 :

CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR … WITH HOLD and firing of deferred triggers within index expressions and materialized view queries.

CVE-2020-25694, bsc#1178667: a) Fix usage of complex connection-string parameters in pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb.
b) When psql’s \connect command re-uses connection parameters, ensure that all non-overridden parameters from a previous connection string are re-used.

CVE-2020-25696, bsc#1178668: Prevent psql’s \gset command from modifying specially-treated variables.

Fix recently-added timetz test case so it works when the USA is not observing daylight savings time. (obsoletes postgresql-timetz.patch)

https://www.postgresql.org/about/news/2111/

https://www.postgresql.org/docs/13/release-13-1.html

Fix a DST problem in the test suite.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2021:0217-1.
# The text itself is copyright (C) SUSE.
#

include('compat.inc');

if (description)
{
  script_id(145490);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2022/05/11");

  script_cve_id("CVE-2020-25694", "CVE-2020-25695", "CVE-2020-25696");

  script_name(english:"SUSE SLES12 Security Update : postgresql, postgresql12, postgresql13 (SUSE-SU-2021:0217-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"This update for postgresql, postgresql12, postgresql13 fixes the
following issues :

Initial packaging of PostgreSQL 13 :

https://www.postgresql.org/about/news/2077/

https://www.postgresql.org/docs/13/release-13.html

Changes in postgresql :

Bump postgresql major version to 13.

Changes in postgresql12 :

%ghost the symlinks to pg_config and ecpg. (bsc#1178961)

BuildRequire libpq5 and libecpg6 when not building them to avoid
dangling symlinks in the devel package. (bsc#1179765)

Fix a DST problem in the test suite.

Changes in postgresql13 :

Add postgresql-icu68.patch: fix build with ICU 68

%ghost the symlinks to pg_config and ecpg. (bsc#1178961)

BuildRequire libpq5 and libecpg6 when not building them to avoid
dangling symlinks in the devel package. (bsc#1179765)

Upgrade to version 13.1 :

CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD and
firing of deferred triggers within index expressions and materialized
view queries.

CVE-2020-25694, bsc#1178667: a) Fix usage of complex connection-string
parameters in pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb.
b) When psql's \connect command re-uses connection parameters, ensure
that all non-overridden parameters from a previous connection string
are re-used.

CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
modifying specially-treated variables.

Fix recently-added timetz test case so it works when the USA is not
observing daylight savings time. (obsoletes postgresql-timetz.patch)

https://www.postgresql.org/about/news/2111/

https://www.postgresql.org/docs/13/release-13-1.html

Fix a DST problem in the test suite.

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1178666");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1178667");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1178668");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1178961");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1179765");
  script_set_attribute(attribute:"see_also", value:"https://www.postgresql.org/about/news/2077/");
  script_set_attribute(attribute:"see_also", value:"https://www.postgresql.org/about/news/2111/");
  script_set_attribute(attribute:"see_also", value:"https://www.postgresql.org/docs/13/release-13-1.html");
  script_set_attribute(attribute:"see_also", value:"https://www.postgresql.org/docs/13/release-13.html");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2020-25694/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2020-25695/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2020-25696/");
  # https://www.suse.com/support/update/announcement/2021/suse-su-20210217-1
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4d1e6b64");
  script_set_attribute(attribute:"solution", value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE OpenStack Cloud Crowbar 9 :

zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2021-217=1

SUSE OpenStack Cloud Crowbar 8 :

zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2021-217=1

SUSE OpenStack Cloud 9 :

zypper in -t patch SUSE-OpenStack-Cloud-9-2021-217=1

SUSE OpenStack Cloud 8 :

zypper in -t patch SUSE-OpenStack-Cloud-8-2021-217=1

SUSE OpenStack Cloud 7 :

zypper in -t patch SUSE-OpenStack-Cloud-7-2021-217=1

SUSE Linux Enterprise Software Development Kit 12-SP5 :

zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-217=1

SUSE Linux Enterprise Server for SAP 12-SP4 :

zypper in -t patch SUSE-SLE-SAP-12-SP4-2021-217=1

SUSE Linux Enterprise Server for SAP 12-SP3 :

zypper in -t patch SUSE-SLE-SAP-12-SP3-2021-217=1

SUSE Linux Enterprise Server for SAP 12-SP2 :

zypper in -t patch SUSE-SLE-SAP-12-SP2-2021-217=1

SUSE Linux Enterprise Server 12-SP5 :

zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-217=1

SUSE Linux Enterprise Server 12-SP4-LTSS :

zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2021-217=1

SUSE Linux Enterprise Server 12-SP3-LTSS :

zypper in -t patch SUSE-SLE-SERVER-12-SP3-2021-217=1

SUSE Linux Enterprise Server 12-SP3-BCL :

zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2021-217=1

SUSE Linux Enterprise Server 12-SP2-LTSS :

zypper in -t patch SUSE-SLE-SERVER-12-SP2-2021-217=1

SUSE Linux Enterprise Server 12-SP2-BCL :

zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2021-217=1

SUSE Enterprise Storage 5 :

zypper in -t patch SUSE-Storage-5-2021-217=1

HPE Helion Openstack 8 :

zypper in -t patch HPE-Helion-OpenStack-8-2021-217=1");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-25696");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2020-25695");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"vuln_publication_date", value:"2020/11/16");
  script_set_attribute(attribute:"patch_publication_date", value:"2021/01/26");
  script_set_attribute(attribute:"plugin_publication_date", value:"2021/01/27");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libecpg6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libecpg6-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libpq5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libpq5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-contrib");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-contrib-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-plperl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-plperl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-plpython");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-plpython-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-pltcl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-pltcl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-server");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql12-server-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-contrib");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-contrib-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-plperl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-plperl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-plpython");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-plpython-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-pltcl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-pltcl-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-server");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:postgresql13-server-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2021-2022 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLES12", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES12" && (! preg(pattern:"^(2|3|4|5)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP2/3/4/5", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES12", sp:"4", reference:"libecpg6-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libecpg6-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libpq5-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libpq5-32bit-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libpq5-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libpq5-debuginfo-32bit-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libecpg6-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libecpg6-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libpq5-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libpq5-32bit-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libpq5-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libpq5-debuginfo-32bit-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libecpg6-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libecpg6-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libpq5-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libpq5-32bit-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libpq5-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libpq5-debuginfo-32bit-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-contrib-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-contrib-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-debugsource-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-plperl-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-plperl-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-plpython-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-plpython-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-pltcl-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-pltcl-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-server-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", cpu:"s390x", reference:"postgresql13-server-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libecpg6-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libecpg6-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libpq5-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libpq5-32bit-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libpq5-debuginfo-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libpq5-debuginfo-32bit-13.1-3.3.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-contrib-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-contrib-debuginfo-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-debuginfo-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-debugsource-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-plperl-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-plperl-debuginfo-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-plpython-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-plpython-debuginfo-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-pltcl-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-pltcl-debuginfo-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-server-12.5-3.12.3")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"postgresql12-server-debuginfo-12.5-3.12.3")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "postgresql / postgresql12 / postgresql13");
}
VendorProductVersionCPE
novellsuse_linuxlibecpg6p-cpe:/a:novell:suse_linux:libecpg6
novellsuse_linuxlibecpg6-debuginfop-cpe:/a:novell:suse_linux:libecpg6-debuginfo
novellsuse_linuxlibpq5p-cpe:/a:novell:suse_linux:libpq5
novellsuse_linuxlibpq5-debuginfop-cpe:/a:novell:suse_linux:libpq5-debuginfo
novellsuse_linuxpostgresql12p-cpe:/a:novell:suse_linux:postgresql12
novellsuse_linuxpostgresql12-contribp-cpe:/a:novell:suse_linux:postgresql12-contrib
novellsuse_linuxpostgresql12-contrib-debuginfop-cpe:/a:novell:suse_linux:postgresql12-contrib-debuginfo
novellsuse_linuxpostgresql12-debuginfop-cpe:/a:novell:suse_linux:postgresql12-debuginfo
novellsuse_linuxpostgresql12-debugsourcep-cpe:/a:novell:suse_linux:postgresql12-debugsource
novellsuse_linuxpostgresql12-plperlp-cpe:/a:novell:suse_linux:postgresql12-plperl
Rows per page:
1-10 of 311

Related

nessus 62
suse 5
altlinux 13
openvas 22
redhat 17
ubuntu 1
archlinux 1
osv 12
kaspersky 1
debian 1
almalinux 4
redos 3
mageia 1
oraclelinux 6
amazon 3
gentoo 1
ibm 6
photon 5
f5 2
fedora 1
centos 1
rocky 1
ubuntucve 3
cbl_mariner 3
veracode 3
alpinelinux 3
cve 3
debiancve 3
prion 3
postgresql 3
redhatcve 3
broadcom 1
cnvd 1
rosalinux 1
nessus
nessus
SUSE SLED15 / SLES15 Security Update : postgresql, postgresql13 (SUSE-SU-2021:0175-1)
2021-01-21 00:00:00
SUSE SLED15 / SLES15 Security Update : postgresql12 (SUSE-SU-2020:3425-1)
2020-12-09 00:00:00
openSUSE Security Update : postgresql12 (openSUSE-2020-2029)
2020-11-30 00:00:00
suse
suse
Security update for postgresql12 (important)
2020-11-26 00:00:00
Security update for postgresql10 (important)
2020-11-26 00:00:00
Security update for postgresql10 (important)
2020-11-26 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package postgresql10 version 10.15-alt0.M80P.1
2020-11-17 00:00:00
Security fix for the ALT Linux 10 package postgresql13 version 13.1-alt1
2020-11-16 00:00:00
Security fix for the ALT Linux 10 package postgresql15-1C version 12.5-alt1
2020-11-16 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:3463-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-4633-1)
2020-11-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:3464-1)
2021-04-19 00:00:00
redhat
redhat
(RHSA-2021:0161) Important: postgresql:10 security update
2021-01-18 09:12:23
(RHSA-2020:5316) Important: rh-postgresql10-postgresql security update
2020-12-02 10:07:42
(RHSA-2020:5317) Important: rh-postgresql12-postgresql security update
2020-12-02 10:07:44
ubuntu
ubuntu
PostgreSQL vulnerabilities
2020-11-17 00:00:00
archlinux
archlinux
[ASA-202011-14] postgresql: multiple issues
2020-11-17 00:00:00
osv
osv
postgresql-9.6 - security update
2020-12-02 00:00:00
postgresql-10, postgresql-12, postgresql-9.5 vulnerabilities
2020-11-17 13:03:44
Important: postgresql:12 security update
2020-12-17 15:30:10
kaspersky
kaspersky
KLA12005 Multiple vulnerabilities in PostgreSQL
2020-11-12 00:00:00
debian
debian
[SECURITY] [DLA 2478-1] postgresql-9.6 security update
2020-12-02 11:05:08
almalinux
almalinux
Important: postgresql:10 security update
2020-12-16 08:03:04
Important: libpq security update
2020-12-14 12:34:53
Important: postgresql:12 security update
2020-12-17 15:30:10
redos
redos
ROS-2-653
2021-09-08 00:00:00
ROS-2-460
2021-09-08 00:00:00
ROS-2-684
2021-09-08 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerabilities
2020-11-21 15:21:00
oraclelinux
oraclelinux
postgresql:10 security update
2020-12-22 00:00:00
libpq security update
2020-12-15 00:00:00
postgresql security update
2021-05-06 00:00:00
amazon
amazon
Important: postgresql95, postgresql96
2021-01-12 22:52:00
Important: postgresql92
2021-07-08 18:38:00
Important: postgresql
2021-06-16 20:37:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2020-12-07 00:00:00
ibm
ibm
Security Bulletin: PostgreSQL vulnerabilities in IBM Robotic Process Automation with Automation Anywhere - CVE-2020-25695, CVE-2020-25694
2021-07-23 21:09:32
Security Bulletin: Multiple Vulnerabilities in PostgreSQL Affect IBM Connect:Direct Web Service
2021-05-17 07:14:04
Security Bulletin: A security vulnerability in PostgreSQL affects IBM Cloud Pak for Multicloud Management.
2021-02-19 04:57:02
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0340
2020-11-25 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0298
2020-11-25 00:00:00
Important Photon OS Security Update - PHSA-2020-0340
2020-11-25 00:00:00
f5
f5
K53632470 : PostgreSQL vulnerabilities CVE-2020-25694, CVE-2020-25695
2021-01-06 00:00:00
K72430453 : PostgreSQL vulnerability CVE-2020-25696
2020-12-22 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: postgresql-12.6-1.fc33
2021-02-26 01:10:06
centos
centos
postgresql security update
2021-06-14 18:54:03
rocky
rocky
postgresql:12 security update
2020-12-17 15:30:10
ubuntucve
ubuntucve
CVE-2020-25696
2020-11-13 00:00:00
CVE-2020-25695
2020-11-13 00:00:00
CVE-2020-25694
2020-11-13 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-25695 affecting package postgresql 12.1-3
2021-06-20 03:47:42
CVE-2020-25696 affecting package postgresql 12.5-1
2021-06-20 03:47:42
CVE-2020-25694 affecting package postgresql 12.1-3
2021-06-20 03:47:42
veracode
veracode
Malicious Code Execution
2020-11-20 09:42:45
Overwriting Variables
2020-11-20 09:48:27
Man-in-the-Middle
2020-11-20 09:38:29
alpinelinux
alpinelinux
CVE-2020-25696
2020-11-23 22:15:00
CVE-2020-25695
2020-11-16 01:15:00
CVE-2020-25694
2020-11-16 01:15:00
cve
cve
CVE-2020-25696
2020-11-23 22:15:00
CVE-2020-25694
2020-11-16 01:15:00
CVE-2020-25695
2020-11-16 01:15:00
debiancve
debiancve
CVE-2020-25694
2020-11-16 01:15:00
CVE-2020-25695
2020-11-16 01:15:00
CVE-2020-25696
2020-11-23 22:15:00
prion
prion
Design/Logic Flaw
2020-11-16 01:15:00
Design/Logic Flaw
2020-11-23 22:15:00
Design/Logic Flaw
2020-11-16 01:15:00
postgresql
postgresql
Vulnerability in client (CVE-2020-25694)
2020-11-16 01:15:00
Vulnerability in core server (CVE-2020-25695)
2020-11-16 01:15:00
Vulnerability in client (CVE-2020-25696)
2020-11-23 22:15:00
redhatcve
redhatcve
CVE-2020-25694
2020-11-12 15:24:01
CVE-2020-25696
2020-11-12 15:24:04
CVE-2020-25695
2020-11-12 15:24:24
broadcom
broadcom
CVE-2020-25695 - Multiple features escape "security restricted operation" sandbox
2023-05-19 00:00:00
cnvd
cnvd
PostgreSQL Arbitrary Code Execution Vulnerability (CNVD-2022-06539)
2020-11-24 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1955
2021-07-02 17:59:52
JSON
Related for SUSE_SU-2021-0217-1.NASL
nessus62suse5altlinux13openvas22redhat17ubuntu1archlinux1osv12kaspersky1debian1almalinux4redos3mageia1oraclelinux6amazon3gentoo1ibm6photon5f52fedora1centos1rocky1ubuntucve3cbl_mariner3veracode3alpinelinux3cve3debiancve3prion3postgresql3redhatcve3broadcom1cnvd1rosalinux1