RHSA-2020_5664

Vulnerability from csaf_redhat - Published: 2020-12-22 09:27 - Updated: 2024-11-15 07:26
Summary
Red Hat Security Advisory: postgresql:10 security update
Severity
Important
Notes
Topic: An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: PostgreSQL is an advanced object-relational database management system (DBMS). The following packages have been upgraded to a later upstream version: postgresql (10.15). Security Fix(es): * postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694) * postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695) * postgresql: Stack-based buffer overflow via setting a password (CVE-2019-10164) * postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208) * postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349) * postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350) * postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696) * postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130) * postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit this to read the most common values of certain columns. Affected columns are those for which the attacker has SELECT privilege and for which, in an ordinary query, row-level security prunes the set of rows visible to the attacker.

CWE-284 - Improper Access Control
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Threats
Impact Low

PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.

CWE-121 - Stack-based Buffer Overflow
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Threats
Impact Moderate

A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Threats
Impact Moderate

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption.

CWE-285 - Improper Authorization
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Threats
Impact Low

A flaw was found in PostgreSQL, where it did not properly sanitize the search_path during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CWE-20 - Improper Input Validation
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Threats
Impact Moderate

A flaw was found in PostgreSQL, where some PostgreSQL extensions did not use the search_path safely in their installation script. This flaw allows an attacker with sufficient privileges to trick an administrator into executing a specially crafted script during the extension's installation or update. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CWE-20 - Improper Input Validation
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Threats
Impact Moderate

A flaw was found in postgresql. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Threats
Impact Important

A flaw was found in postgresql. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Threats
Impact Important

A flaw was found in the psql interactive terminal of PostgreSQL. If an interactive psql session uses \gset when querying a compromised server, this flaw allows an attacker to execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CWE-270 - Privilege Context Switching Error
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64
Vendor Fix fix
Workaround
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2020:5664 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=1707109 external
https://bugzilla.redhat.com/show_bug.cgi?id=1719698 external
https://bugzilla.redhat.com/show_bug.cgi?id=1734416 external
https://bugzilla.redhat.com/show_bug.cgi?id=1798852 external
https://bugzilla.redhat.com/show_bug.cgi?id=1865744 external
https://bugzilla.redhat.com/show_bug.cgi?id=1865746 external
https://bugzilla.redhat.com/show_bug.cgi?id=1894423 external
https://bugzilla.redhat.com/show_bug.cgi?id=1894425 external
https://bugzilla.redhat.com/show_bug.cgi?id=1894430 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2019-10130 self
https://bugzilla.redhat.com/show_bug.cgi?id=1707109 external
https://www.cve.org/CVERecord?id=CVE-2019-10130 external
https://nvd.nist.gov/vuln/detail/CVE-2019-10130 external
https://www.postgresql.org/about/news/1939/ external
https://access.redhat.com/security/cve/CVE-2019-10164 self
https://bugzilla.redhat.com/show_bug.cgi?id=1719698 external
https://www.cve.org/CVERecord?id=CVE-2019-10164 external
https://nvd.nist.gov/vuln/detail/CVE-2019-10164 external
https://www.postgresql.org/support/security/ external
https://access.redhat.com/security/cve/CVE-2019-10208 self
https://bugzilla.redhat.com/show_bug.cgi?id=1734416 external
https://www.cve.org/CVERecord?id=CVE-2019-10208 external
https://nvd.nist.gov/vuln/detail/CVE-2019-10208 external
https://www.postgresql.org/about/news/1960/ external
https://access.redhat.com/security/cve/CVE-2020-1720 self
https://bugzilla.redhat.com/show_bug.cgi?id=1798852 external
https://www.cve.org/CVERecord?id=CVE-2020-1720 external
https://nvd.nist.gov/vuln/detail/CVE-2020-1720 external
https://access.redhat.com/security/cve/CVE-2020-14349 self
https://bugzilla.redhat.com/show_bug.cgi?id=1865744 external
https://www.cve.org/CVERecord?id=CVE-2020-14349 external
https://nvd.nist.gov/vuln/detail/CVE-2020-14349 external
https://access.redhat.com/security/cve/CVE-2020-14350 self
https://bugzilla.redhat.com/show_bug.cgi?id=1865746 external
https://www.cve.org/CVERecord?id=CVE-2020-14350 external
https://nvd.nist.gov/vuln/detail/CVE-2020-14350 external
https://access.redhat.com/security/cve/CVE-2020-25694 self
https://bugzilla.redhat.com/show_bug.cgi?id=1894423 external
https://www.cve.org/CVERecord?id=CVE-2020-25694 external
https://nvd.nist.gov/vuln/detail/CVE-2020-25694 external
https://www.postgresql.org/about/news/postgresql-… external
https://access.redhat.com/security/cve/CVE-2020-25695 self
https://bugzilla.redhat.com/show_bug.cgi?id=1894425 external
https://www.cve.org/CVERecord?id=CVE-2020-25695 external
https://nvd.nist.gov/vuln/detail/CVE-2020-25695 external
https://staaldraad.github.io/post/2020-12-15-cve-… external
https://access.redhat.com/security/cve/CVE-2020-25696 self
https://bugzilla.redhat.com/show_bug.cgi?id=1894430 external
https://www.cve.org/CVERecord?id=CVE-2020-25696 external
https://nvd.nist.gov/vuln/detail/CVE-2020-25696 external
Acknowledgments
Noah Misch the PostgreSQL Project
Dean Rasheed
the PostgreSQL project
Tom Lane
Peter Eisentraut
Etienne Stalmans
Nick Cleaton

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "PostgreSQL is an advanced object-relational database management system (DBMS).\n\nThe following packages have been upgraded to a later upstream version: postgresql (10.15).\n\nSecurity Fix(es):\n\n* postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)\n\n* postgresql: Multiple features escape \"security restricted operation\" sandbox (CVE-2020-25695)\n\n* postgresql: Stack-based buffer overflow via setting a password (CVE-2019-10164)\n\n* postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)\n\n* postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)\n\n* postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)\n\n* postgresql: psql\u0027s \\gset allows overwriting specially treated variables (CVE-2020-25696)\n\n* postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130)\n\n* postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:5664",
        "url": "https://access.redhat.com/errata/RHSA-2020:5664"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1707109",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1707109"
      },
      {
        "category": "external",
        "summary": "1719698",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719698"
      },
      {
        "category": "external",
        "summary": "1734416",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1734416"
      },
      {
        "category": "external",
        "summary": "1798852",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798852"
      },
      {
        "category": "external",
        "summary": "1865744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1865744"
      },
      {
        "category": "external",
        "summary": "1865746",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1865746"
      },
      {
        "category": "external",
        "summary": "1894423",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1894423"
      },
      {
        "category": "external",
        "summary": "1894425",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1894425"
      },
      {
        "category": "external",
        "summary": "1894430",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1894430"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5664.json"
      }
    ],
    "title": "Red Hat Security Advisory: postgresql:10 security update",
    "tracking": {
      "current_release_date": "2024-11-15T07:26:42+00:00",
      "generator": {
        "date": "2024-11-15T07:26:42+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2020:5664",
      "initial_release_date": "2020-12-22T09:27:23+00:00",
      "revision_history": [
        {
          "date": "2020-12-22T09:27:23+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-12-22T09:27:23+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-15T07:26:42+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
                  "product_id": "AppStream-8.0.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:8.0::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "postgresql:10:8000020201214113918:f8e95b4e",
                "product": {
                  "name": "postgresql:10:8000020201214113918:f8e95b4e",
                  "product_id": "postgresql:10:8000020201214113918:f8e95b4e",
                  "product_identification_helper": {
                    "purl": "pkg:rpmmod/redhat/postgresql@10:8000020201214113918:f8e95b4e"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
                "product": {
                  "name": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
                  "product_id": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-contrib@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-contrib-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-debugsource@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-docs@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-docs-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-plperl@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-plperl-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-plpython3@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-plpython3-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-pltcl@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-pltcl-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-server@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-server-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-server-devel@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-server-devel-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-static@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-test@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-test-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-test-rpm-macros@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-upgrade@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-upgrade-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-upgrade-devel@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                "product": {
                  "name": "postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_id": "postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-upgrade-devel-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-contrib@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-contrib-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-debugsource@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-docs@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-docs-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-plperl@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-plperl-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-plpython3@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-plpython3-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-pltcl@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-pltcl-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-server@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-server-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-server-devel@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-server-devel-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-static@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-test@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-test-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-test-rpm-macros@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-upgrade@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-upgrade-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-upgrade-devel@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                "product": {
                  "name": "postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_id": "postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/postgresql-upgrade-devel-debuginfo@10.15-1.module%2Bel8.0.0%2B9155%2B4a85661a?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
        },
        "product_reference": "postgresql:10:8000020201214113918:f8e95b4e",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src"
        },
        "product_reference": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le"
        },
        "product_reference": "postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64 as a component of postgresql:10:8000020201214113918:f8e95b4e as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)",
          "product_id": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        },
        "product_reference": "postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Noah Misch",
            "the PostgreSQL Project"
          ]
        },
        {
          "names": [
            "Dean Rasheed"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-10130",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-04-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1707109"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit this to read the most common values of certain columns. Affected columns are those for which the attacker has SELECT privilege and for which, in an ordinary query, row-level security prunes the set of rows visible to the attacker.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: Selectivity estimators bypass row security policies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability requires row level security to be in use, and an attacker to be able to execute crafted queries against the target PostgreSQL database. Neither of these conditions is true in Red Hat Ansible Tower, Red Hat CloudForms or Red Hat Satellite.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10130"
        },
        {
          "category": "external",
          "summary": "RHBZ#1707109",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1707109"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10130",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10130"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10130",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10130"
        },
        {
          "category": "external",
          "summary": "https://www.postgresql.org/about/news/1939/",
          "url": "https://www.postgresql.org/about/news/1939/"
        }
      ],
      "release_date": "2019-05-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-12-22T09:27:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nIf the postgresql service is running, it will be automatically restarted after installing this update.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:5664"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "postgresql: Selectivity estimators bypass row security policies"
    },
    {
      "cve": "CVE-2019-10164",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2019-06-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1719698"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user\u0027s own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: Stack-based buffer overflow via setting a password",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10164"
        },
        {
          "category": "external",
          "summary": "RHBZ#1719698",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719698"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10164",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10164"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10164",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10164"
        },
        {
          "category": "external",
          "summary": "https://www.postgresql.org/support/security/",
          "url": "https://www.postgresql.org/support/security/"
        }
      ],
      "release_date": "2019-06-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-12-22T09:27:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nIf the postgresql service is running, it will be automatically restarted after installing this update.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:5664"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "postgresql: Stack-based buffer overflow via setting a password"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the PostgreSQL project"
          ]
        },
        {
          "names": [
            "Tom Lane"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-10208",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "discovery_date": "2019-07-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1734416"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Virtualization Management Appliance included affected versions of postgresql, however no custom SECURITY DEFINER functions are declared so this vulnerability can not be exploited in the default configuration.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10208"
        },
        {
          "category": "external",
          "summary": "RHBZ#1734416",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1734416"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10208",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10208"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10208",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10208"
        },
        {
          "category": "external",
          "summary": "https://www.postgresql.org/about/news/1960/",
          "url": "https://www.postgresql.org/about/news/1960/"
        }
      ],
      "release_date": "2019-08-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-12-22T09:27:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nIf the postgresql service is running, it will be automatically restarted after installing this update.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:5664"
        },
        {
          "category": "workaround",
          "details": "If your use case requires SECURITY DEFINER functions, please follow the advice below to write them safely so they do not rely on search_path and restrict the set of users which can access them.\n\nhttps://www.postgresql.org/docs/devel/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution"
    },
    {
      "cve": "CVE-2020-1720",
      "cwe": {
        "id": "CWE-285",
        "name": "Improper Authorization"
      },
      "discovery_date": "2020-02-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798852"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PostgreSQL\u0027s \"ALTER ... DEPENDS ON EXTENSION\", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-1720"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798852",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798852"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1720",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-1720"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1720",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1720"
        }
      ],
      "release_date": "2020-02-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-12-22T09:27:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nIf the postgresql service is running, it will be automatically restarted after installing this update.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:5664"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks"
    },
    {
      "cve": "CVE-2020-14349",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2020-08-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1865744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PostgreSQL, where it did not properly sanitize the search_path during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user\u0027s context for replication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: Uncontrolled search path element in logical replication",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In Red Hat Gluster Storage 3, PostgreSQL was shipped as a part of Red Hat Gluster Storage Console that is no longer supported for use with Red Hat Gluster Storage 3.5. Red Hat Gluster Storage Web Administration is now the recommended monitoring tool for Red Hat Storage Gluster clusters.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-14349"
        },
        {
          "category": "external",
          "summary": "RHBZ#1865744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1865744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-14349",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14349"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14349",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14349"
        }
      ],
      "release_date": "2020-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-12-22T09:27:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nIf the postgresql service is running, it will be automatically restarted after installing this update.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:5664"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "postgresql: Uncontrolled search path element in logical replication"
    },
    {
      "cve": "CVE-2020-14350",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2020-08-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1865746"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PostgreSQL, where some PostgreSQL extensions did not use the search_path safely in their installation script. This flaw allows an attacker with sufficient privileges to trick an administrator into executing a specially crafted script during the extension\u0027s installation or update. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: Uncontrolled search path element in CREATE EXTENSION",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In Red Hat Gluster Storage 3, PostgreSQL was shipped as a part of Red Hat Gluster Storage Console that is no longer supported for use with Red Hat Gluster Storage 3.5. Red Hat Gluster Storage Web Administration is now the recommended monitoring tool for Red Hat Storage Gluster clusters.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-14350"
        },
        {
          "category": "external",
          "summary": "RHBZ#1865746",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1865746"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-14350",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14350"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14350",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14350"
        }
      ],
      "release_date": "2020-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-12-22T09:27:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nIf the postgresql service is running, it will be automatically restarted after installing this update.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:5664"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "postgresql: Uncontrolled search path element in CREATE EXTENSION"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Peter Eisentraut"
          ]
        }
      ],
      "cve": "CVE-2020-25694",
      "cwe": {
        "id": "CWE-327",
        "name": "Use of a Broken or Risky Cryptographic Algorithm"
      },
      "discovery_date": "2020-11-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1894423"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in postgresql. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: Reconnection can downgrade connection security settings",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In Red Hat Gluster Storage 3, PostgreSQL (embedded in rhevm-dependencies) was shipped as a part of Red Hat Gluster Storage Console that is no longer supported for use with Red Hat Gluster Storage 3.5. Red Hat Gluster Storage Web Administration is now the recommended monitoring tool for Red Hat Storage Gluster clusters.\nIn Red Hat Virtualization the manager appliance uses a vulnerable version of postgresql. Once a fix has been shipped for RHEL 8 the appliance can consume the fix via a regular yum update.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-25694"
        },
        {
          "category": "external",
          "summary": "RHBZ#1894423",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1894423"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25694",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-25694"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25694",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25694"
        },
        {
          "category": "external",
          "summary": "https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/",
          "url": "https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/"
        }
      ],
      "release_date": "2020-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-12-22T09:27:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nIf the postgresql service is running, it will be automatically restarted after installing this update.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:5664"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "postgresql: Reconnection can downgrade connection security settings"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Etienne Stalmans"
          ]
        }
      ],
      "cve": "CVE-2020-25695",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "discovery_date": "2020-11-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1894425"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in postgresql. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: Multiple features escape \"security restricted operation\" sandbox",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In Red Hat Gluster Storage 3, PostgreSQL (embedded in rhevm-dependencies) was shipped as a part of Red Hat Gluster Storage Console that is no longer supported for use with Red Hat Gluster Storage 3.5. Red Hat Gluster Storage Web Administration is now the recommended monitoring tool for Red Hat Storage Gluster clusters.\nIn Red Hat Virtualization the manager appliance uses a vulnerable version of postgresql. Once a fix has been shipped for RHEL 8 the appliance can consume the fix via a regular yum update.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-25695"
        },
        {
          "category": "external",
          "summary": "RHBZ#1894425",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1894425"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25695",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-25695"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25695",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25695"
        },
        {
          "category": "external",
          "summary": "https://staaldraad.github.io/post/2020-12-15-cve-2020-25695-postgresql-privesc/",
          "url": "https://staaldraad.github.io/post/2020-12-15-cve-2020-25695-postgresql-privesc/"
        },
        {
          "category": "external",
          "summary": "https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/",
          "url": "https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/"
        }
      ],
      "release_date": "2020-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-12-22T09:27:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nIf the postgresql service is running, it will be automatically restarted after installing this update.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:5664"
        },
        {
          "category": "workaround",
          "details": "While promptly updating PostgreSQL is the best remediation for most users, a user unable to do that can work around the vulnerability by disabling autovacuum and not manually running ANALYZE, CLUSTER, REINDEX, CREATE INDEX, VACUUM FULL, REFRESH MATERIALIZED VIEW, or a restore from output of the pg_dump command. Performance may degrade quickly under this workaround.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "postgresql: Multiple features escape \"security restricted operation\" sandbox"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Nick Cleaton"
          ]
        }
      ],
      "cve": "CVE-2020-25696",
      "cwe": {
        "id": "CWE-270",
        "name": "Privilege Context Switching Error"
      },
      "discovery_date": "2020-11-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1894430"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the psql interactive terminal of PostgreSQL. If an interactive psql session uses \\gset when querying a compromised server, this flaw allows an attacker to execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postgresql: psql\u0027s \\gset allows overwriting specially treated variables",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In Red Hat Gluster Storage 3, PostgreSQL (embedded in rhevm-dependencies) was shipped as a part of the Red Hat Gluster Storage Console that is no longer supported for use with Red Hat Gluster Storage 3.5. Red Hat Gluster Storage Web Administration is now the recommended monitoring tool for Red Hat Storage Gluster clusters.\nIn Red Hat Virtualization, the manager appliance uses a vulnerable version of postgresql. Once a fix has been shipped for RHEL 8 the appliance can consume the fix via a regular yum update.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
          "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-25696"
        },
        {
          "category": "external",
          "summary": "RHBZ#1894430",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1894430"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25696",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-25696"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25696",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25696"
        },
        {
          "category": "external",
          "summary": "https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/",
          "url": "https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/"
        }
      ],
      "release_date": "2020-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-12-22T09:27:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nIf the postgresql service is running, it will be automatically restarted after installing this update.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:5664"
        },
        {
          "category": "workaround",
          "details": "Using \\gset with a prefix not found among specially treated variables, e.g. any lowercase string, precludes the attack in an unpatched psql.",
          "product_ids": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.src",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-contrib-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-debugsource-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-docs-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plperl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-plpython3-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-pltcl-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-server-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-static-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-test-rpm-macros-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.ppc64le",
            "AppStream-8.0.0.Z.E4S:postgresql:10:8000020201214113918:f8e95b4e:postgresql-upgrade-devel-debuginfo-0:10.15-1.module+el8.0.0+9155+4a85661a.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "postgresql: psql\u0027s \\gset allows overwriting specially treated variables"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…