RHSA-2020:5620
- Source
- https://access.redhat.com/errata/RHSA-2020:5620
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2020:5620.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2020:5620
- Upstream
- Published
- 2024-10-21T23:24:29Z
- Modified
- 2025-09-11T11:33:08Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: postgresql:12 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2020:5620
- https://access.redhat.com/security/updates/classification/#important
- https://www.postgresql.org/docs/12/release-12-2.html
- https://www.postgresql.org/docs/12/release-12-3.html
- https://www.postgresql.org/docs/12/release-12-4.html
- https://www.postgresql.org/docs/12/release-12-5.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1798852
- https://bugzilla.redhat.com/show_bug.cgi?id=1865744
- https://bugzilla.redhat.com/show_bug.cgi?id=1865746
- https://bugzilla.redhat.com/show_bug.cgi?id=1894423
- https://bugzilla.redhat.com/show_bug.cgi?id=1894425
- https://bugzilla.redhat.com/show_bug.cgi?id=1894430
- https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5620.json
- https://access.redhat.com/security/cve/CVE-2020-1720
- https://www.cve.org/CVERecord?id=CVE-2020-1720
- https://nvd.nist.gov/vuln/detail/CVE-2020-1720
- https://access.redhat.com/security/cve/CVE-2020-14349
- https://www.cve.org/CVERecord?id=CVE-2020-14349
- https://nvd.nist.gov/vuln/detail/CVE-2020-14349
- https://access.redhat.com/security/cve/CVE-2020-14350
- https://www.cve.org/CVERecord?id=CVE-2020-14350
- https://nvd.nist.gov/vuln/detail/CVE-2020-14350
- https://access.redhat.com/security/cve/CVE-2020-25694
- https://www.cve.org/CVERecord?id=CVE-2020-25694
- https://nvd.nist.gov/vuln/detail/CVE-2020-25694
- https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/
- https://access.redhat.com/security/cve/CVE-2020-25695
- https://www.cve.org/CVERecord?id=CVE-2020-25695
- https://nvd.nist.gov/vuln/detail/CVE-2020-25695
- https://staaldraad.github.io/post/2020-12-15-cve-2020-25695-postgresql-privesc/
- https://access.redhat.com/security/cve/CVE-2020-25696
- https://www.cve.org/CVERecord?id=CVE-2020-25696
- https://nvd.nist.gov/vuln/detail/CVE-2020-25696
Affected packages
Red Hat:enterprise_linux:8::appstream / pgaudit-1.4.0
Package
- Name
- pgaudit-1.4.0
- Purl
- pkg:rpm/redhat/pgaudit
Red Hat:enterprise_linux:8::appstream / pgaudit-debuginfo-1.4.0
Package
- Name
- pgaudit-debuginfo-1.4.0
- Purl
- pkg:rpm/redhat/pgaudit-debuginfo
Red Hat:enterprise_linux:8::appstream / pgaudit-debugsource-1.4.0
Package
- Name
- pgaudit-debugsource-1.4.0
- Purl
- pkg:rpm/redhat/pgaudit-debugsource
Red Hat:enterprise_linux:8::appstream / postgres-decoderbufs-0.10.0
Package
- Name
- postgres-decoderbufs-0.10.0
- Purl
- pkg:rpm/redhat/postgres-decoderbufs
Red Hat:enterprise_linux:8::appstream / postgres-decoderbufs-debuginfo-0.10.0
Package
- Name
- postgres-decoderbufs-debuginfo-0.10.0
- Purl
- pkg:rpm/redhat/postgres-decoderbufs-debuginfo
Red Hat:enterprise_linux:8::appstream / postgres-decoderbufs-debugsource-0.10.0
Package
- Name
- postgres-decoderbufs-debugsource-0.10.0
- Purl
- pkg:rpm/redhat/postgres-decoderbufs-debugsource
Red Hat:enterprise_linux:8::appstream / postgresql-12.5
Package
- Name
- postgresql-12.5
- Purl
- pkg:rpm/redhat/postgresql
Red Hat:enterprise_linux:8::appstream / postgresql-contrib-12.5
Package
- Name
- postgresql-contrib-12.5
- Purl
- pkg:rpm/redhat/postgresql-contrib
Red Hat:enterprise_linux:8::appstream / postgresql-contrib-debuginfo-12.5
Package
- Name
- postgresql-contrib-debuginfo-12.5
- Purl
- pkg:rpm/redhat/postgresql-contrib-debuginfo
Red Hat:enterprise_linux:8::appstream / postgresql-debuginfo-12.5
Package
- Name
- postgresql-debuginfo-12.5
- Purl
- pkg:rpm/redhat/postgresql-debuginfo
Red Hat:enterprise_linux:8::appstream / postgresql-debugsource-12.5
Package
- Name
- postgresql-debugsource-12.5
- Purl
- pkg:rpm/redhat/postgresql-debugsource
Red Hat:enterprise_linux:8::appstream / postgresql-docs-12.5
Package
- Name
- postgresql-docs-12.5
- Purl
- pkg:rpm/redhat/postgresql-docs
Red Hat:enterprise_linux:8::appstream / postgresql-docs-debuginfo-12.5
Package
- Name
- postgresql-docs-debuginfo-12.5
- Purl
- pkg:rpm/redhat/postgresql-docs-debuginfo
Red Hat:enterprise_linux:8::appstream / postgresql-plperl-12.5
Package
- Name
- postgresql-plperl-12.5
- Purl
- pkg:rpm/redhat/postgresql-plperl
Red Hat:enterprise_linux:8::appstream / postgresql-plperl-debuginfo-12.5
Package
- Name
- postgresql-plperl-debuginfo-12.5
- Purl
- pkg:rpm/redhat/postgresql-plperl-debuginfo
Red Hat:enterprise_linux:8::appstream / postgresql-plpython3-12.5
Package
- Name
- postgresql-plpython3-12.5
- Purl
- pkg:rpm/redhat/postgresql-plpython3
Red Hat:enterprise_linux:8::appstream / postgresql-plpython3-debuginfo-12.5
Package
- Name
- postgresql-plpython3-debuginfo-12.5
- Purl
- pkg:rpm/redhat/postgresql-plpython3-debuginfo
Red Hat:enterprise_linux:8::appstream / postgresql-pltcl-12.5
Package
- Name
- postgresql-pltcl-12.5
- Purl
- pkg:rpm/redhat/postgresql-pltcl
Red Hat:enterprise_linux:8::appstream / postgresql-pltcl-debuginfo-12.5
Package
- Name
- postgresql-pltcl-debuginfo-12.5
- Purl
- pkg:rpm/redhat/postgresql-pltcl-debuginfo
Red Hat:enterprise_linux:8::appstream / postgresql-server-12.5
Package
- Name
- postgresql-server-12.5
- Purl
- pkg:rpm/redhat/postgresql-server
Red Hat:enterprise_linux:8::appstream / postgresql-server-debuginfo-12.5
Package
- Name
- postgresql-server-debuginfo-12.5
- Purl
- pkg:rpm/redhat/postgresql-server-debuginfo
Red Hat:enterprise_linux:8::appstream / postgresql-server-devel-12.5
Package
- Name
- postgresql-server-devel-12.5
- Purl
- pkg:rpm/redhat/postgresql-server-devel
Red Hat:enterprise_linux:8::appstream / postgresql-server-devel-debuginfo-12.5
Package
- Name
- postgresql-server-devel-debuginfo-12.5
- Purl
- pkg:rpm/redhat/postgresql-server-devel-debuginfo
Red Hat:enterprise_linux:8::appstream / postgresql-static-12.5
Package
- Name
- postgresql-static-12.5
- Purl
- pkg:rpm/redhat/postgresql-static
Red Hat:enterprise_linux:8::appstream / postgresql-test-12.5
Package
- Name
- postgresql-test-12.5
- Purl
- pkg:rpm/redhat/postgresql-test
Red Hat:enterprise_linux:8::appstream / postgresql-test-debuginfo-12.5
Package
- Name
- postgresql-test-debuginfo-12.5
- Purl
- pkg:rpm/redhat/postgresql-test-debuginfo
Red Hat:enterprise_linux:8::appstream / postgresql-test-rpm-macros-12.5
Package
- Name
- postgresql-test-rpm-macros-12.5
- Purl
- pkg:rpm/redhat/postgresql-test-rpm-macros
Red Hat:enterprise_linux:8::appstream / postgresql-upgrade-12.5
Package
- Name
- postgresql-upgrade-12.5
- Purl
- pkg:rpm/redhat/postgresql-upgrade
Red Hat:enterprise_linux:8::appstream / postgresql-upgrade-debuginfo-12.5
Package
- Name
- postgresql-upgrade-debuginfo-12.5
- Purl
- pkg:rpm/redhat/postgresql-upgrade-debuginfo
Red Hat:enterprise_linux:8::appstream / postgresql-upgrade-devel-12.5
Package
- Name
- postgresql-upgrade-devel-12.5
- Purl
- pkg:rpm/redhat/postgresql-upgrade-devel