RHSA-2021:1512: Important: postgresql security update
PostgreSQL is an advanced object-relational database management system (DBMS).<br>Security Fix(es):<br><li> postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)</li> <li> postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695)</li> <li> postgresql: TYPE in pgtemp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:1512?
The severity for RHSA-2021:1512 is rated as important.
How do I fix RHSA-2021:1512?
To fix RHSA-2021:1512, update the PostgreSQL packages to version 9.2.24-6.el7_9 or higher.
What vulnerabilities are addressed in RHSA-2021:1512?
RHSA-2021:1512 addresses CVE-2020-25694, which involves reconnection downgrading connection security settings.
Which PostgreSQL packages are affected by RHSA-2021:1512?
Affected packages for RHSA-2021:1512 include postgresql, postgresql-contrib, postgresql-devel, postgresql-libs, and others.
Is RHSA-2021:1512 applicable to all systems?
RHSA-2021:1512 applies specifically to Red Hat Enterprise Linux systems utilizing certain versions of PostgreSQL.