It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufs | May 4, 2022 | Aug 24, 2020 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql12Upgrade postgresql14Upgrade postgresql15 | Sep 23, 2020 | Aug 24, 2020 |
| Centos_linux | — | Upgrade postgresql-upgrade-devel-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-test-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-docsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade pgaudit-debugsourceUpgrade pgauditUpgrade postgresql-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-test | Sep 9, 2020 | Aug 24, 2020 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 27, 2020 | Aug 24, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-contrib | Sep 29, 2020 | Aug 24, 2020 |
| Oracle_linux | — | Upgrade rh-postgresql10-postgresqlUpgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-testUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-serverUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade rh-postgresql10-postgresql-plpythonUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-develUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-serverUpgrade postgres-decoderbufsUpgrade rh-postgresql10-postgresql-testUpgrade rh-postgresql10-postgresql-staticUpgrade postgresql-staticUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-docsUpgrade postgresqlUpgrade pgauditUpgrade rh-postgresql10-postgresql-contrib-syspaths | Sep 10, 2020 | Aug 13, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 12.4 | Aug 17, 2020 | Aug 17, 2020 |
| Redhat_linux | — | Upgrade postgresql-serverUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade pgauditUpgrade postgresql-docsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperlUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-staticUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-plpython3Upgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-devel | Sep 9, 2020 | Aug 24, 2020 |
| Rocky_linux | — | Upgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade pgauditUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade pgaudit-debuginfo | Mar 12, 2024 | Aug 24, 2020 |
| Suse | — | Upgrade postgresql12-docsUpgrade postgresql12-serverUpgrade postgresql96-serverUpgrade postgresql-plpythonUpgrade postgresql12-contribUpgrade postgresql12-pltclUpgrade postgresql10-serverUpgrade postgresql11-docsUpgrade libpq5-32bitUpgrade postgresql11-server-develUpgrade postgresql-develUpgrade postgresql10-contribUpgrade postgresql10Upgrade postgresql96-pltclUpgrade postgresql96Upgrade postgresql11-plperlUpgrade postgresql-server-develUpgrade postgresql10-docsUpgrade libecpg6Upgrade postgresql10-develUpgrade postgresql-contribUpgrade postgresql-llvmjitUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql96-contribUpgrade postgresql96-plperlUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql11-contribUpgrade postgresql12-llvmjitUpgrade postgresql96-plpythonUpgrade postgresql11-pltclUpgrade postgresql12-testUpgrade postgresql11-develUpgrade postgresql12Upgrade postgresql12-develUpgrade postgresql11-testUpgrade postgresql10-testUpgrade postgresql10-plpythonUpgrade postgresql96-docsUpgrade postgresql11-serverUpgrade postgresql-docsUpgrade postgresql96-testUpgrade postgresql10-plperlUpgrade postgresql12-server-develUpgrade postgresql10-pltclUpgrade postgresql12-plperlUpgrade postgresql11Upgrade postgresql11-llvmjitUpgrade postgresql96-develUpgrade postgresql12-plpythonUpgrade libpq5Upgrade postgresql11-plpythonUpgrade libecpg6-32bit | Aug 18, 2020 | Aug 17, 2020 |
| Ubuntu | — | Upgrade postgresql-9.5Upgrade postgresql-10Upgrade postgresql-12 | Aug 26, 2020 | Aug 17, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub