Most recent entries from all

ALSA-2020:5620 — Important: postgresql:12 security update

Affected: AlmaLinux:8: postgres-decoderbufs

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (12.5).

Security Fix(es):

* postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)

* postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695)

* postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

* postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

* postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)

* postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2020-05466

Withdrawn: BELL-CVE-2020-25696 — CVE-2020-25696 does not affect BellSoft software

Withdrawn by the publisher.

BIT-postgresql-2020-25696

Affected: Bitnami: postgresql

A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

certfr-2020-avi-744 — De multiples vulnérabilités ont été découvertes dans PostgreSQL. Elles permettent à un attaquant de provoquer une exécu…

certfr-2020-avi-744

CLEANSTART-2026-FL46674 — Security fix for CVE-2020-25696 applied in: postgresql15 12.5-r0

Affected: CleanStart: postgresql15

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details.

cnvd-2022-06539

EUVD-2026-45735

fkie_cve-2020-25696

GHSA-rfp5-6w27-jrq7 — Incorrect Comparison, Permissive List of Allowed Inputs, and Privilege Context Switching Error in PostgreSQL

gsd-2020-25696

msrc_CVE-2020-25696 — A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1 before 12.5 before 11.10 before…

msrc_CVE-2020-25696

openSUSE-SU-2020:2018-1 — Security update for postgresql12

Security update for postgresql12

RHSA-2020:5316 — Red Hat Security Advisory: rh-postgresql10-postgresql security update

postgresql: Reconnection can downgrade connection security settings postgresql: Multiple features escape "security restricted operation" sandbox postgresql: psql's \gset allows overwriting specially treated variables

SUSE-SU-2020:3425-1 — Security update for postgresql12

Security update for postgresql12

UBUNTU-CVE-2020-25696

Affected: Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5, Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12

WID-SEC-W-2022-1383 — PostgreSQL: Mehrere Schwachstellen

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.