RHSA-2020:4295MediumCVSS 7.5

Red Hat Security Advisory: rh-postgresql96-postgresql security update

Published
October 21, 2020
Last Modified
August 4, 2026

🔗 CVE IDs covered (4)

CVE-2019-10130 →CVE-2019-10208 →CVE-2020-1720 →CVE-2020-14350 →

📋 Description

CVE-2019-10130 — postgresql: Selectivity estimators bypass row security policies CVE-2019-10208 — postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution CVE-2020-1720 — postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks CVE-2020-14350 — postgresql: Uncontrolled search path element in CREATE EXTENSION

🎯 Affected products173

  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-postgresql96-postgresql-0:9.6.19-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-postgresql96-postgresql-contrib-0:9.6.19-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • +143 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. Workaround: If your use case requires SECURITY DEFINER functions, please follow the advice below to write them safely so they do not rely on search_path and restrict the set of users which can access them. https://www.postgresql.org/docs/devel/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY

🔗 References (7)