245 matches found
SUSE SLES12 Security Update : postgresql96 (SUSE-SU-2020:0586-1)
This update for postgresql96 fixes the following issues : PostgreSQL was updated to version 9.6.17. Security issue fixed : CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985. Note that Tenable Network Security has extracted the preceding descriptio...
SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2020:0589-1)
This update for postgresql10 fixes the following issues : PostgreSQL was updated to version 10.12. Security issue fixed : CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985. Note that Tenable Network Security has extracted the preceding description...
SUSE-SU-2020:0589-1 Security update for postgresql10
This update for postgresql10 fixes the following issues: PostgreSQL was updated to version 10.12. Security issue fixed: - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985...
SUSE-SU-2020:0586-1 Security update for postgresql96
This update for postgresql96 fixes the following issues: PostgreSQL was updated to version 9.6.17. Security issue fixed: - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985...
Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.17-alt0.M80P.1
9.6.17-alt0.M80P.1 built Feb. 25, 2020 Alexei Takaseev in task 245913 Feb. 12, 2020 Alexei Takaseev - 9.6.17 Fixes CVE-2020-1720...
Security fix for the ALT Linux 8 package postgresql12 version 12.2-alt0.M80P.1
12.2-alt0.M80P.1 built Feb. 25, 2020 Alexei Takaseev in task 245913 Feb. 12, 2020 Alexei Takaseev - 12.2 Fixes CVE-2020-1720...
Security fix for the ALT Linux 8 package postgresql11-1C version 11.5-alt0.M80P.4
11.5-alt0.M80P.4 built Feb. 25, 2020 Alexei Takaseev in task 245913 Feb. 12, 2020 Alexei Takaseev - Fix priv checks for ALTER <object DEPENDS ON EXTENSION Fixes CVE-2020-1720...
Security fix for the ALT Linux 8 package postgresql10 version 10.12-alt0.M80P.1
10.12-alt0.M80P.1 built Feb. 25, 2020 Alexei Takaseev in task 245913 Feb. 12, 2020 Alexei Takaseev - 10.12 Fixes CVE-2020-1720...
PostgreSQL 9.6.x < 9.6.17 / 10.x < 10.12 / 11.x < 11.7 / 12.x < 12.2 Missing Authorization
The version of PostgreSQL installed on the remote host is 9.6 prior to 9.6.17, 10 prior to 10.12, 11 prior to 11.7, or 12 prior to 12.2. As such, it is potentially affected by a vulnerability : - ALTER ... DEPENDS ON EXTENSION is missing authorization checks. CVE-2020-1720 Note that Nessus has no...
Updated postgresql packages fix security vulnerability
Updated postgresql9.6 and postgresql11 packages fix security vulnerability: The ALTER ... DEPENDS ON EXTENSION sub-commands do not perform authorization checks, which can allow an unprivileged user to drop any function, procedure, materialized view, index, or trigger under certain conditions. Thi...
Security fix for the ALT Linux 9 package postgresql12 version 12.2-alt1
12.2-alt1 built Feb. 18, 2020 Alexei Takaseev in task 245909 Feb. 12, 2020 Alexei Takaseev - 12.2 Fixes CVE-2020-1720...
[SECURITY] [DLA 2105-1] postgresql-9.4 security update
Package : postgresql-9.4 Version : 9.4.26-0+deb8u1 CVE ID : CVE-2020-1720 Tom Lane discovered that "ALTER ... DEPENDS ON EXTENSION" sub commands in the PostgreSQL database did not perform authorisation checks. For Debian 8 "Jessie", this problem has been fixed in version 9.4.26-0+deb8u1. We...
Debian DSA-4623-1 : postgresql-11 - security update
Tom Lane discovered that 'ALTER ... DEPENDS ON EXTENSION' sub commands in the PostgreSQL database did not perform authorisation checks. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4623. The text itself is...
Debian DSA-4622-1 : postgresql-9.6 - security update
Tom Lane discovered that 'ALTER ... DEPENDS ON EXTENSION' sub commands in the PostgreSQL database did not perform authorisation checks. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4622. The text itself is...
[SECURITY] [DSA 4623-1] postgresql-11 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4623-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4622-1] postgresql-9.6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4622-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2020 https://www.debian.org/security/faq -...
CVE-2020-1720
A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issu...
KLA11675 Authorization check vulnerability in PostgreSQL
Authorization check vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories https://www.postgresql.org/about/news/2011/ Related products PostgreSQL CVE list CVE-2020-1720 warning Solution Update to the latest versi...