RHSA-2018:2565HighCVSS 8.5

Red Hat Security Advisory: rh-postgresql10-postgresql security update

Published
August 27, 2018
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2018-10925 →CVE-2018-1115 →CVE-2018-10915 →

📋 Description

CVE-2018-1115 — postgresql: Too-permissive access control list on function pg_logfile_rotate() CVE-2018-10915 — postgresql: Certain host connection parameters defeat client-side security defenses CVE-2018-10925 — postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements

🎯 Affected products200

  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)
  • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • rh-postgresql10-postgresql-0:10.5-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql10-postgresql-0:10.5-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql10-postgresql-0:10.5-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)
  • rh-postgresql10-postgresql-0:10.5-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)
  • rh-postgresql10-postgresql-0:10.5-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)
  • rh-postgresql10-postgresql-0:10.5-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql10-postgresql-0:10.5-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)
  • rh-postgresql10-postgresql-0:10.5-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)
  • rh-postgresql10-postgresql-0:10.5-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)
  • rh-postgresql10-postgresql-0:10.5-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql10-postgresql-0:10.5-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)
  • rh-postgresql10-postgresql-0:10.5-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)
  • rh-postgresql10-postgresql-0:10.5-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)
  • rh-postgresql10-postgresql-0:10.5-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • rh-postgresql10-postgresql-0:10.5-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql10-postgresql-0:10.5-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)
  • rh-postgresql10-postgresql-0:10.5-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)
  • rh-postgresql10-postgresql-0:10.5-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)
  • rh-postgresql10-postgresql-0:10.5-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • rh-postgresql10-postgresql-contrib-0:10.5-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql10-postgresql-contrib-0:10.5-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql10-postgresql-contrib-0:10.5-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)
  • rh-postgresql10-postgresql-contrib-0:10.5-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)
  • rh-postgresql10-postgresql-contrib-0:10.5-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)
  • rh-postgresql10-postgresql-contrib-0:10.5-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update.

🔗 References (6)