The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has postgresql packages installed that are affected by multiple vulnerabilities:

  - A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before     9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a     suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute     arbitrary SQL as the owner of the function. (CVE-2019-10208)

  - A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before     9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses     the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-     the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat     from this vulnerability is to data confidentiality and integrity as well as system availability.
    (CVE-2020-25694)

  - A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before     9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one     schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this     vulnerability is to data confidentiality and integrity as well as system availability. (CVE-2020-25695)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for postgresql, postgresql13 fixes the following issues :

This update ships postgresql13.

Upgrade to version 13.1 :

  - CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ...
    WITH HOLD and firing of deferred triggers within index     expressions and materialized view queries.

  - CVE-2020-25694, bsc#1178667: a) Fix usage of complex     connection-string parameters in pg_dump, pg_restore,     clusterdb, reindexdb, and vacuumdb. b) When psql's     \connect command re-uses connection parameters, ensure     that all non-overridden parameters from a previous     connection string are re-used.

  - CVE-2020-25696, bsc#1178668: Prevent psql's \gset     command from modifying specially-treated variables.

  - Fix recently-added timetz test case so it works when the     USA is not observing daylight savings time. (obsoletes     postgresql-timetz.patch)

- https://www.postgresql.org/about/news/2111/

- https://www.postgresql.org/docs/13/release-13-1.html

Initial packaging of PostgreSQL 13 :

- https://www.postgresql.org/about/news/2077/

- https://www.postgresql.org/docs/13/release-13.html

  - bsc#1178961: %ghost the symlinks to pg_config and ecpg.

Changes in postgresql wrapper package :

  - Bump major version to 13.

  - We also transfer PostgreSQL 9.4.26 to the new package     layout in SLE12-SP2 and newer. Reflect this in the     conflict with postgresql94.

  - Also conflict with PostgreSQL versions before 9.

  - Conflicting with older versions is not limited to SLE.

This update was imported from the SUSE:SLE-15-SP2:Update update project.

An update of the postgresql package has been released.

This update for postgresql10 fixes the following issues :

  - Upgrade to version 10.15 :

  - CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ...
    WITH HOLD and firing of deferred triggers within index     expressions and materialized view queries.

  - CVE-2020-25694, bsc#1178667: a) Fix usage of complex     connection-string parameters in pg_dump, pg_restore,     clusterdb, reindexdb, and vacuumdb. b) When psql's     \connect command re-uses connection parameters, ensure     that all non-overridden parameters from a previous     connection string are re-used.

  - CVE-2020-25696, bsc#1178668: Prevent psql's \gset     command from modifying specially-treated variables.

  - Fix recently-added timetz test case so it works when the     USA is not observing daylight savings time.

  - https://www.postgresql.org/about/news/2111/

  - https://www.postgresql.org/docs/10/release-10-15.html

This update was imported from the SUSE:SLE-15-SP1:Update update project.

According to the versions of the postgresql packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in PostgreSQL versions before 13.1,     before 12.5, before 11.10, before 10.15, before 9.6.20     and before 9.5.24. If a client application that creates     additional database connections only reuses the basic     connection parameters while dropping security-relevant     parameters, an opportunity for a man-in-the-middle     attack, or the ability to observe clear-text     transmissions, could exist. The highest threat from     this vulnerability is to data confidentiality and     integrity as well as system     availability.(CVE-2020-25694)

  - A flaw was found in PostgreSQL versions before 13.1,     before 12.5, before 11.10, before 10.15, before 9.6.20     and before 9.5.24. An attacker having permission to     create non-temporary objects in at least one schema can     execute arbitrary SQL functions under the identity of a     superuser. The highest threat from this vulnerability     is to data confidentiality and integrity as well as     system availability.(CVE-2020-25695)

  - A flaw was found in the psql interactive terminal of     PostgreSQL in versions before 13.1, before 12.5, before     11.10, before 10.15, before 9.6.20 and before 9.5.24.
    If an interactive psql session uses \gset when querying     a compromised server, the attacker can execute     arbitrary code as the operating system account running     psql. The highest threat from this vulnerability is to     data confidentiality and integrity as well as system     availability.(CVE-2020-25696)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5664 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    The following packages have been upgraded to a later upstream version: postgresql (10.15).

    Security Fix(es):

    * postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)

    * postgresql: Multiple features escape security restricted operation sandbox (CVE-2020-25695)

    * postgresql: Stack-based buffer overflow via setting a password (CVE-2019-10164)

    * postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)

    * postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

    * postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

    * postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)

    * postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130)

    * postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5317 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    The following packages have been upgraded to a later upstream version: rh-postgresql12-postgresql (12.5).

    Security Fix(es):

    * postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)

    * postgresql: Multiple features escape security restricted operation sandbox (CVE-2020-25695)

    * postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
154465	NewStart CGSL CORE 5.04 / MAIN 5.04 : postgresql Multiple Vulnerabilities (NS-SA-2021-0109)	Nessus	NewStart CGSL Local Security Checks	10/27/2021	5/9/2022	high
146831	openSUSE Security Update : postgresql / postgresql13 (openSUSE-2021-337)	Nessus	SuSE Local Security Checks	2/25/2021	5/10/2022	high
143252	Photon OS 3.0: Postgresql PHSA-2020-3.0-0164	Nessus	PhotonOS Local Security Checks	11/24/2020	7/24/2024	high
143338	openSUSE Security Update : postgresql10 (openSUSE-2020-2019)	Nessus	SuSE Local Security Checks	11/30/2020	2/7/2024	high
144160	EulerOS 2.0 SP8 : postgresql (EulerOS-SA-2020-2526)	Nessus	Huawei Local Security Checks	12/14/2020	5/11/2022	high
144559	RHEL 8 : postgresql:10 (RHSA-2020:5664)	Nessus	Red Hat Local Security Checks	12/22/2020	11/7/2024	high
170338	RHEL 7 : rh-postgresql12-postgresql (RHSA-2020:5317)	Nessus	Red Hat Local Security Checks	1/23/2023	11/7/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high