AVG-1276 log
| Package | postgresql |
| Status | Fixed |
| Severity | High |
| Type | multiple issues |
| Affected | 12.4-2 |
| Fixed | 12.5-1 |
| Current |
16.2-2 [extra-testing] 16.2-1 [extra] |
| Ticket | None |
| Created | Thu Nov 12 16:16:51 2020 |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2020-25696 | Medium | Yes | Arbitrary code execution | A security issue has been found in PostgreSQL before 12.5, where psql's \gset allows overwriting specially treated variables. The \gset meta-command, which... |
| CVE-2020-25695 | High | Yes | Sandbox escape | A security issue has been found in PostgreSQL before 12.5, where an attacker having permission to create non-temporary objects in at least one schema can... |
| CVE-2020-25694 | Low | Yes | Silent downgrade | A security issue has been found in PostgreSQL before 12.5. Many PostgreSQL-provided client applications have options that create additional database... |
| Date | Advisory | Package | Type |
|---|---|---|---|
| 17 Nov 2020 | ASA-202011-14 | postgresql | multiple issues |
| References |
|---|
https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/ |