csaf_opensuse - opensuse-su-2020:1227-1

opensuse-su-2020:1227-1

Vulnerability from csaf_opensuse

Published

2020-08-17 10:30

Modified

2020-08-17 10:30

Summary

Security update for postgresql96, postgresql10 and postgresql12

Notes

Title of the patch

Security update for postgresql96, postgresql10 and postgresql12

Description of the patch

This update for postgresql96, postgresql10 and postgresql12 fixes the following issues: postgresql10 was updated to 10.13 (bsc#1171924). https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/10/release-10-13.html postgresql10 was updated to 10.12 (CVE-2020-1720, bsc#1163985) - https://www.postgresql.org/about/news/2011/ - https://www.postgresql.org/docs/10/release-10-12.html postgresql10 was updated to 10.11: - https://www.postgresql.org/about/news/1994/ - https://www.postgresql.org/docs/10/release-10-11.html postgresql12 was updated to 12.3 (bsc#1171924). Bug Fixes and Improvements: - Several fixes for GENERATED columns, including an issue where it was possible to crash or corrupt data in a table when the output of the generated column was the exact copy of a physical column on the table, e.g. if the expression called a function which could return its own input. - Several fixes for ALTER TABLE, including ensuring the SET STORAGE directive is propagated to a table's indexes. - Fix a potential race condition when using DROP OWNED BY while another session is deleting the same objects. - Allow for a partition to be detached when it has inherited ROW triggers. - Several fixes for REINDEX CONCURRENTLY, particularly with issues when a REINDEX CONCURRENTLY operation fails. - Fix crash when COLLATE is applied to an uncollatable type in a partition bound expression. - Fix performance regression in floating point overflow/underflow detection. - Several fixes for full text search, particularly with phrase searching. - Fix query-lifespan memory leak for a set-returning function used in a query's FROM clause. - Several reporting fixes for the output of VACUUM VERBOSE. - Allow input of type circle to accept the format (x,y),r, which is specified in the documentation. - Allow for the get_bit() and set_bit() functions to not fail on bytea strings longer than 256MB. - Avoid premature recycling of WAL segments during crash recovery, which could lead to WAL segments being recycled before being archived. - Avoid attempting to fetch nonexistent WAL files from archive storage during recovery by skipping irrelevant timelines. - Several fixes for logical replication and replication slots. - Fix several race conditions in synchronous standby management, including one that occurred when changing the synchronous_standby_names setting. - Several fixes for GSSAPI support, include a fix for a memory leak that occurred when using GSSAPI encryption. - Ensure that members of the pg_read_all_stats role can read all statistics views. - Fix performance regression in information_schema.triggers view. - Fix memory leak in libpq when using sslmode=verify-full. - Fix crash in psql when attempting to re-establish a failed connection. - Allow tab-completion of the filename argument to \gx command in psql. - Add pg_dump support for ALTER ... DEPENDS ON EXTENSION. - Several other fixes for pg_dump, which include dumping comments on RLS policies and postponing restore of event triggers until the end. - Ensure pg_basebackup generates valid tar files. - pg_checksums skips tablespace subdirectories that belong to a different PostgreSQL major version - Several Windows compatibility fixes This update also contains timezone tzdata release 2020a for DST law changes in Morocco and the Canadian Yukon, plus historical corrections for Shanghai. The America/Godthab zone has been renamed to America/Nuuk to reflect current English usage ; however, the old name remains available as a compatibility link. This also updates initdb's list of known Windows time zone names to include recent additions. For more details, check out: - https://www.postgresql.org/docs/12/release-12-3.html Other fixes: - Let postgresqlXX conflict with postgresql-noarch < 12.0.1 to get a clean and complete cutover to the new packaging schema. postgresql96 was updated to 9.6.19: * CVE-2020-14350, boo#1175194: Make contrib modules' installation scripts more secure. * https://www.postgresql.org/docs/9.6/release-9-6-19.html - Pack the /usr/lib/postgresql symlink only into the main package. - Let postgresqlXX conflict with postgresql-noarch < 12.0.1 to get a clean and complete cutover to the new packaging schema. - update to 9.6.18 (boo#1171924). https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/9.6/release-9-6-18.html - Unify the spec file to work across all current PostgreSQL versions to simplify future maintenance. - Move from the 'libs' build flavour to a 'mini' package that will only be used inside the build service and not get shipped, to avoid confusion with the debuginfo packages (boo#1148643). - update to 9.6.17 (CVE-2020-1720, boo#1163985) https://www.postgresql.org/about/news/2011/ https://www.postgresql.org/docs/9.6/release-9-6-17.html - use and package the sha256 checksum for for source - update to 9.6.16: https://www.postgresql.org/about/news/1994/ https://www.postgresql.org/docs/9.6/release-9-6-16.html - add requires to the devel package for the libs that are returned by pg_config --libs - Update to 9.6.15: * https://www.postgresql.org/about/news/1960/ * https://www.postgresql.org/docs/9.6/release-9-6-15.html * CVE-2019-10208, boo#1145092: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution. - Use FAT LTO objects in order to provide proper static library. - Update to 9.6.14: https://www.postgresql.org/docs/9.6/release-9-6-14.html - Update to 9.6.13: * https://www.postgresql.org/docs/9.6/release-9-6-13.html * https://www.postgresql.org/about/news/1939/ * CVE-2019-10130, boo#1134689: Prevent row-level security policies from being bypassed via selectivity estimators. - Make the server-devel package exclusive across versions. - Update to 9.6.12: * https://www.postgresql.org/docs/9.6/release-9-6-12.html * https://www.postgresql.org/about/news/1920/ * By default, panic instead of retrying after fsync() failure, to avoid possible data corruption. * Numerous other bug fixes. - Overhaul README.SUSE - Update to 9.6.11: * Numerous bug fixes, see the release notes: https://www.postgresql.org/docs/9.6/release-9-6-11.html * Remove unneeded library dependencies from PGXS. - add provides for the new server-devel package that will be introduced in postgresql 11 - Update to 9.6.10: https://www.postgresql.org/docs/current/static/release-9-6-10.html * CVE-2018-10915, boo#1104199: Fix failure to reset libpq's state fully between connection attempts. * CVE-2018-10925, boo#1104202: Fix INSERT ... ON CONFLICT UPDATE through a view that isn't just SELECT * FROM ... - Update to 9.6.9: https://www.postgresql.org/about/news/1851/ https://www.postgresql.org/docs/current/static/release-9-6-9.html A dump/restore is not required for those running 9.6.X. However, if you use the adminpack extension, you should update it as per the first changelog entry below. Also, if the function marking mistakes mentioned in the second and third changelog entries below affect you, you will want to take steps to correct your database catalogs. * CVE-2018-1115, boo#1091610: Remove public execute privilege from contrib/adminpack's pg_logfile_rotate() function pg_logfile_rotate() is a deprecated wrapper for the core function pg_rotate_logfile(). When that function was changed to rely on SQL privileges for access control rather than a hard-coded superuser check, pg_logfile_rotate() should have been updated as well, but the need for this was missed. Hence, if adminpack is installed, any user could request a logfile rotation, creating a minor security issue. After installing this update, administrators should update adminpack by performing ALTER EXTENSION adminpack UPDATE in each database in which adminpack is installed. * Fix incorrect volatility markings on a few built-in functions * Fix incorrect parallel-safety markings on a few built-in functions. This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patchnames

openSUSE-2020-1227

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for postgresql96, postgresql10 and postgresql12 ",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for postgresql96, postgresql10 and postgresql12 fixes the following issues:\n\npostgresql10 was updated to 10.13 (bsc#1171924).\n\n  https://www.postgresql.org/about/news/2038/\n  https://www.postgresql.org/docs/10/release-10-13.html\n\npostgresql10 was updated to 10.12 (CVE-2020-1720, bsc#1163985)\n\n- https://www.postgresql.org/about/news/2011/\n- https://www.postgresql.org/docs/10/release-10-12.html\n\npostgresql10 was updated to 10.11:\n\n- https://www.postgresql.org/about/news/1994/\n- https://www.postgresql.org/docs/10/release-10-11.html\n\n\npostgresql12 was updated to 12.3 (bsc#1171924).\n\nBug Fixes and Improvements:\n\n- Several fixes for GENERATED columns, including an issue where it was possible to crash or corrupt data in a table when the output of the generated column was the exact copy of a physical column on the table, e.g. if the expression called a function which could return its own input.\n- Several fixes for ALTER TABLE, including ensuring the SET STORAGE directive is propagated to a table\u0027s indexes.\n- Fix a potential race condition when using DROP OWNED BY while another session is deleting the same objects.\n- Allow for a partition to be detached when it has inherited ROW triggers.\n- Several fixes for REINDEX CONCURRENTLY, particularly with issues when a REINDEX CONCURRENTLY operation fails.\n- Fix crash when COLLATE is applied to an uncollatable type in a partition bound expression.\n- Fix performance regression in floating point overflow/underflow detection.\n- Several fixes for full text search, particularly with phrase searching.\n- Fix query-lifespan memory leak for a set-returning function used in a query\u0027s FROM clause.\n- Several reporting fixes for the output of VACUUM VERBOSE.\n- Allow input of type circle to accept the format (x,y),r, which is specified in the documentation.\n- Allow for the get_bit() and set_bit() functions to not fail on bytea strings longer than 256MB.\n- Avoid premature recycling of WAL segments during crash recovery, which could lead to WAL segments being recycled before being archived.\n- Avoid attempting to fetch nonexistent WAL files from archive storage during recovery by skipping irrelevant timelines.\n- Several fixes for logical replication and replication slots.\n- Fix several race conditions in synchronous standby management, including one that occurred when changing the synchronous_standby_names setting.\n- Several fixes for GSSAPI support, include a fix for a memory leak that occurred when using GSSAPI encryption.\n- Ensure that members of the pg_read_all_stats role can read all statistics views.\n- Fix performance regression in information_schema.triggers view.\n- Fix memory leak in libpq when using sslmode=verify-full.\n- Fix crash in psql when attempting to re-establish a failed connection.\n- Allow tab-completion of the filename argument to \\gx command in psql.\n- Add pg_dump support for ALTER ... DEPENDS ON EXTENSION.\n- Several other fixes for pg_dump, which include dumping comments on RLS policies and postponing restore of event triggers until the end.\n- Ensure pg_basebackup generates valid tar files.\n- pg_checksums skips tablespace subdirectories that belong to a different PostgreSQL major version\n- Several Windows compatibility fixes\n\nThis update also contains timezone tzdata release 2020a for DST law changes in Morocco and the Canadian Yukon, plus historical corrections for Shanghai. The America/Godthab zone has been renamed to America/Nuuk to reflect current English usage ; however, the old name remains available as a compatibility link. This also updates initdb\u0027s list of known Windows time zone names to include recent additions.\n\nFor more details, check out:\n\n-  https://www.postgresql.org/docs/12/release-12-3.html\n\nOther fixes:\n\n- Let postgresqlXX conflict with postgresql-noarch \u003c 12.0.1 to get\n  a clean and complete cutover to the new packaging schema.\n\n\npostgresql96 was updated to 9.6.19:\n\n  * CVE-2020-14350, boo#1175194: Make contrib modules\u0027 installation\n    scripts more secure.\n  * https://www.postgresql.org/docs/9.6/release-9-6-19.html\n\n- Pack the /usr/lib/postgresql symlink only into the main package.\n\n- Let postgresqlXX conflict with postgresql-noarch \u003c 12.0.1 to get\n  a clean and complete cutover to the new packaging schema.\n\n- update to 9.6.18 (boo#1171924).\n  https://www.postgresql.org/about/news/2038/\n  https://www.postgresql.org/docs/9.6/release-9-6-18.html\n- Unify the spec file to work across all current PostgreSQL\n  versions to simplify future maintenance.\n- Move from the \u0027libs\u0027 build flavour to a \u0027mini\u0027 package that will\n  only be used inside the build service and not get shipped, to\n  avoid confusion with the debuginfo packages (boo#1148643).\n\n- update to 9.6.17 (CVE-2020-1720, boo#1163985)\n  https://www.postgresql.org/about/news/2011/\n  https://www.postgresql.org/docs/9.6/release-9-6-17.html\n\n- use and package the sha256 checksum for for source\n\n- update to 9.6.16:\n  https://www.postgresql.org/about/news/1994/\n  https://www.postgresql.org/docs/9.6/release-9-6-16.html\n\n- add requires to the devel package for the libs that are returned\n  by pg_config --libs\n\n- Update to 9.6.15:\n  * https://www.postgresql.org/about/news/1960/\n  * https://www.postgresql.org/docs/9.6/release-9-6-15.html\n  * CVE-2019-10208, boo#1145092: TYPE in pg_temp executes arbitrary\n    SQL during SECURITY DEFINER execution.\n\n- Use FAT LTO objects in order to provide proper static library.\n\n- Update to 9.6.14:\n  https://www.postgresql.org/docs/9.6/release-9-6-14.html\n\n- Update to 9.6.13:\n  * https://www.postgresql.org/docs/9.6/release-9-6-13.html\n  * https://www.postgresql.org/about/news/1939/\n  * CVE-2019-10130, boo#1134689: Prevent row-level security\n    policies from being bypassed via selectivity estimators.\n\n- Make the server-devel package exclusive across versions.\n\n- Update to 9.6.12:\n  * https://www.postgresql.org/docs/9.6/release-9-6-12.html\n  * https://www.postgresql.org/about/news/1920/\n  * By default, panic instead of retrying after fsync() failure,\n    to avoid possible data corruption.\n  * Numerous other bug fixes.\n- Overhaul README.SUSE\n\n- Update to 9.6.11:\n  * Numerous bug fixes, see the release notes:\n    https://www.postgresql.org/docs/9.6/release-9-6-11.html\n  * Remove unneeded library dependencies from PGXS.\n\n- add provides for the new server-devel package that will be\n  introduced in postgresql 11\n\n- Update to 9.6.10:\n  https://www.postgresql.org/docs/current/static/release-9-6-10.html\n  * CVE-2018-10915, boo#1104199: Fix failure to reset libpq\u0027s state\n    fully between connection attempts.\n  * CVE-2018-10925, boo#1104202: Fix INSERT ... ON CONFLICT UPDATE\n    through a view that isn\u0027t just SELECT * FROM ...\n\n- Update to 9.6.9:\n  https://www.postgresql.org/about/news/1851/\n  https://www.postgresql.org/docs/current/static/release-9-6-9.html\n  A dump/restore is not required for those running 9.6.X.\n  However, if you use the adminpack extension, you should update\n  it as per the first changelog entry below.\n  Also, if the function marking mistakes mentioned in the second\n  and third changelog entries below affect you, you will want to\n  take steps to correct your database catalogs.\n  * CVE-2018-1115, boo#1091610: Remove public execute privilege\n    from contrib/adminpack\u0027s pg_logfile_rotate() function\n    pg_logfile_rotate() is a deprecated wrapper for the core\n    function pg_rotate_logfile(). When that function was changed\n    to rely on SQL privileges for access control rather than a\n    hard-coded superuser check, pg_logfile_rotate() should have\n    been updated as well, but the need for this was missed. Hence,\n    if adminpack is installed, any user could request a logfile\n    rotation, creating a minor security issue.\n    After installing this update, administrators should update\n    adminpack by performing ALTER EXTENSION adminpack UPDATE in\n    each database in which adminpack is installed.\n  * Fix incorrect volatility markings on a few built-in functions\n  * Fix incorrect parallel-safety markings on a few built-in\n    functions.\n\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-1227",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1227-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:1227-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RPLLEO7T4JPO4J5JMG2O4ZTONMNDEL64/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:1227-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RPLLEO7T4JPO4J5JMG2O4ZTONMNDEL64/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1091610",
        "url": "https://bugzilla.suse.com/1091610"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1104199",
        "url": "https://bugzilla.suse.com/1104199"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1104202",
        "url": "https://bugzilla.suse.com/1104202"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1134689",
        "url": "https://bugzilla.suse.com/1134689"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1145092",
        "url": "https://bugzilla.suse.com/1145092"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1148643",
        "url": "https://bugzilla.suse.com/1148643"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1163985",
        "url": "https://bugzilla.suse.com/1163985"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171924",
        "url": "https://bugzilla.suse.com/1171924"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175194",
        "url": "https://bugzilla.suse.com/1175194"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-10915 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-10915/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-10925 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-10925/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-1115 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-1115/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10130 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10130/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10208 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10208/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-14350 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-14350/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-1720 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-1720/"
      }
    ],
    "title": "Security update for postgresql96, postgresql10 and postgresql12 ",
    "tracking": {
      "current_release_date": "2020-08-17T10:30:27Z",
      "generator": {
        "date": "2020-08-17T10:30:27Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:1227-1",
      "initial_release_date": "2020-08-17T10:30:27Z",
      "revision_history": [
        {
          "date": "2020-08-17T10:30:27Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "postgresql10-10.13-lp151.2.14.1.i586",
                "product": {
                  "name": "postgresql10-10.13-lp151.2.14.1.i586",
                  "product_id": "postgresql10-10.13-lp151.2.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-contrib-10.13-lp151.2.14.1.i586",
                "product": {
                  "name": "postgresql10-contrib-10.13-lp151.2.14.1.i586",
                  "product_id": "postgresql10-contrib-10.13-lp151.2.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-devel-10.13-lp151.2.14.1.i586",
                "product": {
                  "name": "postgresql10-devel-10.13-lp151.2.14.1.i586",
                  "product_id": "postgresql10-devel-10.13-lp151.2.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-plperl-10.13-lp151.2.14.1.i586",
                "product": {
                  "name": "postgresql10-plperl-10.13-lp151.2.14.1.i586",
                  "product_id": "postgresql10-plperl-10.13-lp151.2.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-plpython-10.13-lp151.2.14.1.i586",
                "product": {
                  "name": "postgresql10-plpython-10.13-lp151.2.14.1.i586",
                  "product_id": "postgresql10-plpython-10.13-lp151.2.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-pltcl-10.13-lp151.2.14.1.i586",
                "product": {
                  "name": "postgresql10-pltcl-10.13-lp151.2.14.1.i586",
                  "product_id": "postgresql10-pltcl-10.13-lp151.2.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-server-10.13-lp151.2.14.1.i586",
                "product": {
                  "name": "postgresql10-server-10.13-lp151.2.14.1.i586",
                  "product_id": "postgresql10-server-10.13-lp151.2.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-test-10.13-lp151.2.14.1.i586",
                "product": {
                  "name": "postgresql10-test-10.13-lp151.2.14.1.i586",
                  "product_id": "postgresql10-test-10.13-lp151.2.14.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-9.6.19-lp151.3.3.1.i586",
                "product": {
                  "name": "postgresql96-9.6.19-lp151.3.3.1.i586",
                  "product_id": "postgresql96-9.6.19-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
                "product": {
                  "name": "postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
                  "product_id": "postgresql96-contrib-9.6.19-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-devel-9.6.19-lp151.3.3.1.i586",
                "product": {
                  "name": "postgresql96-devel-9.6.19-lp151.3.3.1.i586",
                  "product_id": "postgresql96-devel-9.6.19-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
                "product": {
                  "name": "postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
                  "product_id": "postgresql96-plperl-9.6.19-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
                "product": {
                  "name": "postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
                  "product_id": "postgresql96-plpython-9.6.19-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
                "product": {
                  "name": "postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
                  "product_id": "postgresql96-pltcl-9.6.19-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-server-9.6.19-lp151.3.3.1.i586",
                "product": {
                  "name": "postgresql96-server-9.6.19-lp151.3.3.1.i586",
                  "product_id": "postgresql96-server-9.6.19-lp151.3.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-test-9.6.19-lp151.3.3.1.i586",
                "product": {
                  "name": "postgresql96-test-9.6.19-lp151.3.3.1.i586",
                  "product_id": "postgresql96-test-9.6.19-lp151.3.3.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "postgresql-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-contrib-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-devel-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-devel-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-devel-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-docs-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-docs-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-docs-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-plperl-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-plpython-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-pltcl-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-server-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-server-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-server-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-server-devel-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql-test-12.0.1-lp151.6.9.1.noarch",
                "product": {
                  "name": "postgresql-test-12.0.1-lp151.6.9.1.noarch",
                  "product_id": "postgresql-test-12.0.1-lp151.6.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-docs-10.13-lp151.2.14.1.noarch",
                "product": {
                  "name": "postgresql10-docs-10.13-lp151.2.14.1.noarch",
                  "product_id": "postgresql10-docs-10.13-lp151.2.14.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-docs-12.3-lp151.2.1.noarch",
                "product": {
                  "name": "postgresql12-docs-12.3-lp151.2.1.noarch",
                  "product_id": "postgresql12-docs-12.3-lp151.2.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
                "product": {
                  "name": "postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
                  "product_id": "postgresql96-docs-9.6.19-lp151.3.3.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libecpg6-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "libecpg6-12.3-lp151.2.1.x86_64",
                  "product_id": "libecpg6-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libpq5-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "libpq5-12.3-lp151.2.1.x86_64",
                  "product_id": "libpq5-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-10.13-lp151.2.14.1.x86_64",
                "product": {
                  "name": "postgresql10-10.13-lp151.2.14.1.x86_64",
                  "product_id": "postgresql10-10.13-lp151.2.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
                "product": {
                  "name": "postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
                  "product_id": "postgresql10-contrib-10.13-lp151.2.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-devel-10.13-lp151.2.14.1.x86_64",
                "product": {
                  "name": "postgresql10-devel-10.13-lp151.2.14.1.x86_64",
                  "product_id": "postgresql10-devel-10.13-lp151.2.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
                "product": {
                  "name": "postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
                  "product_id": "postgresql10-plperl-10.13-lp151.2.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
                "product": {
                  "name": "postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
                  "product_id": "postgresql10-plpython-10.13-lp151.2.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
                "product": {
                  "name": "postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
                  "product_id": "postgresql10-pltcl-10.13-lp151.2.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-server-10.13-lp151.2.14.1.x86_64",
                "product": {
                  "name": "postgresql10-server-10.13-lp151.2.14.1.x86_64",
                  "product_id": "postgresql10-server-10.13-lp151.2.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql10-test-10.13-lp151.2.14.1.x86_64",
                "product": {
                  "name": "postgresql10-test-10.13-lp151.2.14.1.x86_64",
                  "product_id": "postgresql10-test-10.13-lp151.2.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "postgresql12-12.3-lp151.2.1.x86_64",
                  "product_id": "postgresql12-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-contrib-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "postgresql12-contrib-12.3-lp151.2.1.x86_64",
                  "product_id": "postgresql12-contrib-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-devel-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "postgresql12-devel-12.3-lp151.2.1.x86_64",
                  "product_id": "postgresql12-devel-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
                  "product_id": "postgresql12-llvmjit-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-plperl-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "postgresql12-plperl-12.3-lp151.2.1.x86_64",
                  "product_id": "postgresql12-plperl-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-plpython-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "postgresql12-plpython-12.3-lp151.2.1.x86_64",
                  "product_id": "postgresql12-plpython-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-pltcl-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "postgresql12-pltcl-12.3-lp151.2.1.x86_64",
                  "product_id": "postgresql12-pltcl-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-server-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "postgresql12-server-12.3-lp151.2.1.x86_64",
                  "product_id": "postgresql12-server-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-server-devel-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "postgresql12-server-devel-12.3-lp151.2.1.x86_64",
                  "product_id": "postgresql12-server-devel-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql12-test-12.3-lp151.2.1.x86_64",
                "product": {
                  "name": "postgresql12-test-12.3-lp151.2.1.x86_64",
                  "product_id": "postgresql12-test-12.3-lp151.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-9.6.19-lp151.3.3.1.x86_64",
                "product": {
                  "name": "postgresql96-9.6.19-lp151.3.3.1.x86_64",
                  "product_id": "postgresql96-9.6.19-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
                "product": {
                  "name": "postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
                  "product_id": "postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
                "product": {
                  "name": "postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
                  "product_id": "postgresql96-devel-9.6.19-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
                "product": {
                  "name": "postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
                  "product_id": "postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
                "product": {
                  "name": "postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
                  "product_id": "postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
                "product": {
                  "name": "postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
                  "product_id": "postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
                "product": {
                  "name": "postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
                  "product_id": "postgresql96-server-9.6.19-lp151.3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "postgresql96-test-9.6.19-lp151.3.3.1.x86_64",
                "product": {
                  "name": "postgresql96-test-9.6.19-lp151.3.3.1.x86_64",
                  "product_id": "postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libecpg6-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "libecpg6-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpq5-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "libpq5-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-contrib-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-devel-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-devel-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-docs-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-docs-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-plperl-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-plpython-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-pltcl-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-server-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-server-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-server-devel-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql-test-12.0.1-lp151.6.9.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch"
        },
        "product_reference": "postgresql-test-12.0.1-lp151.6.9.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-10.13-lp151.2.14.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586"
        },
        "product_reference": "postgresql10-10.13-lp151.2.14.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-10.13-lp151.2.14.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64"
        },
        "product_reference": "postgresql10-10.13-lp151.2.14.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-contrib-10.13-lp151.2.14.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586"
        },
        "product_reference": "postgresql10-contrib-10.13-lp151.2.14.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-contrib-10.13-lp151.2.14.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64"
        },
        "product_reference": "postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-devel-10.13-lp151.2.14.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586"
        },
        "product_reference": "postgresql10-devel-10.13-lp151.2.14.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-devel-10.13-lp151.2.14.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64"
        },
        "product_reference": "postgresql10-devel-10.13-lp151.2.14.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-docs-10.13-lp151.2.14.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch"
        },
        "product_reference": "postgresql10-docs-10.13-lp151.2.14.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-plperl-10.13-lp151.2.14.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586"
        },
        "product_reference": "postgresql10-plperl-10.13-lp151.2.14.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-plperl-10.13-lp151.2.14.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64"
        },
        "product_reference": "postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-plpython-10.13-lp151.2.14.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586"
        },
        "product_reference": "postgresql10-plpython-10.13-lp151.2.14.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-plpython-10.13-lp151.2.14.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64"
        },
        "product_reference": "postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-pltcl-10.13-lp151.2.14.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586"
        },
        "product_reference": "postgresql10-pltcl-10.13-lp151.2.14.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-pltcl-10.13-lp151.2.14.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64"
        },
        "product_reference": "postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-server-10.13-lp151.2.14.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586"
        },
        "product_reference": "postgresql10-server-10.13-lp151.2.14.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-server-10.13-lp151.2.14.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64"
        },
        "product_reference": "postgresql10-server-10.13-lp151.2.14.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-test-10.13-lp151.2.14.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586"
        },
        "product_reference": "postgresql10-test-10.13-lp151.2.14.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql10-test-10.13-lp151.2.14.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64"
        },
        "product_reference": "postgresql10-test-10.13-lp151.2.14.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "postgresql12-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-contrib-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "postgresql12-contrib-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-devel-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "postgresql12-devel-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-docs-12.3-lp151.2.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch"
        },
        "product_reference": "postgresql12-docs-12.3-lp151.2.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-llvmjit-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-plperl-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "postgresql12-plperl-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-plpython-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "postgresql12-plpython-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-pltcl-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "postgresql12-pltcl-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-server-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "postgresql12-server-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-server-devel-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "postgresql12-server-devel-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql12-test-12.3-lp151.2.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64"
        },
        "product_reference": "postgresql12-test-12.3-lp151.2.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-9.6.19-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586"
        },
        "product_reference": "postgresql96-9.6.19-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-9.6.19-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64"
        },
        "product_reference": "postgresql96-9.6.19-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-contrib-9.6.19-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586"
        },
        "product_reference": "postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64"
        },
        "product_reference": "postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-devel-9.6.19-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586"
        },
        "product_reference": "postgresql96-devel-9.6.19-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-devel-9.6.19-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64"
        },
        "product_reference": "postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-docs-9.6.19-lp151.3.3.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch"
        },
        "product_reference": "postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-plperl-9.6.19-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586"
        },
        "product_reference": "postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64"
        },
        "product_reference": "postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-plpython-9.6.19-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586"
        },
        "product_reference": "postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64"
        },
        "product_reference": "postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-pltcl-9.6.19-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586"
        },
        "product_reference": "postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64"
        },
        "product_reference": "postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-server-9.6.19-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586"
        },
        "product_reference": "postgresql96-server-9.6.19-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-server-9.6.19-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64"
        },
        "product_reference": "postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-test-9.6.19-lp151.3.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586"
        },
        "product_reference": "postgresql96-test-9.6.19-lp151.3.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "postgresql96-test-9.6.19-lp151.3.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
        },
        "product_reference": "postgresql96-test-9.6.19-lp151.3.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-10915",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-10915"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with \"host\" or \"hostaddr\" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
          "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-10915",
          "url": "https://www.suse.com/security/cve/CVE-2018-10915"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1104199 for CVE-2018-10915",
          "url": "https://bugzilla.suse.com/1104199"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140876 for CVE-2018-10915",
          "url": "https://bugzilla.suse.com/1140876"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185814 for CVE-2018-10915",
          "url": "https://bugzilla.suse.com/1185814"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-08-17T10:30:27Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-10915"
    },
    {
      "cve": "CVE-2018-10925",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-10925"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with \"INSERT ... ON CONFLICT DO UPDATE\". An attacker with \"CREATE TABLE\" privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain \"INSERT\" and limited \"UPDATE\" privileges to a particular table, they could exploit this to update other columns in the same table.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
          "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-10925",
          "url": "https://www.suse.com/security/cve/CVE-2018-10925"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1104202 for CVE-2018-10925",
          "url": "https://bugzilla.suse.com/1104202"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-08-17T10:30:27Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-10925"
    },
    {
      "cve": "CVE-2018-1115",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-1115"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn\u0027t follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
          "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-1115",
          "url": "https://www.suse.com/security/cve/CVE-2018-1115"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1091610 for CVE-2018-1115",
          "url": "https://bugzilla.suse.com/1091610"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-08-17T10:30:27Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2018-1115"
    },
    {
      "cve": "CVE-2019-10130",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10130"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit this to read the most common values of certain columns. Affected columns are those for which the attacker has SELECT privilege and for which, in an ordinary query, row-level security prunes the set of rows visible to the attacker.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
          "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10130",
          "url": "https://www.suse.com/security/cve/CVE-2019-10130"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1134689 for CVE-2019-10130",
          "url": "https://bugzilla.suse.com/1134689"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-08-17T10:30:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10130"
    },
    {
      "cve": "CVE-2019-10208",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10208"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
          "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10208",
          "url": "https://www.suse.com/security/cve/CVE-2019-10208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1145092 for CVE-2019-10208",
          "url": "https://bugzilla.suse.com/1145092"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171566 for CVE-2019-10208",
          "url": "https://bugzilla.suse.com/1171566"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-08-17T10:30:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10208"
    },
    {
      "cve": "CVE-2020-14350",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-14350"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
          "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-14350",
          "url": "https://www.suse.com/security/cve/CVE-2020-14350"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1175194 for CVE-2020-14350",
          "url": "https://bugzilla.suse.com/1175194"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176151 for CVE-2020-14350",
          "url": "https://bugzilla.suse.com/1176151"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179115 for CVE-2020-14350",
          "url": "https://bugzilla.suse.com/1179115"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179499 for CVE-2020-14350",
          "url": "https://bugzilla.suse.com/1179499"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179870 for CVE-2020-14350",
          "url": "https://bugzilla.suse.com/1179870"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-08-17T10:30:27Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-14350"
    },
    {
      "cve": "CVE-2020-1720",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-1720"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in PostgreSQL\u0027s \"ALTER ... DEPENDS ON EXTENSION\", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
          "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
          "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
          "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-1720",
          "url": "https://www.suse.com/security/cve/CVE-2020-1720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1163985 for CVE-2020-1720",
          "url": "https://bugzilla.suse.com/1163985"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:libecpg6-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:libpq5-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-contrib-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-docs-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-llvmjit-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plperl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-plpython-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-pltcl-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-server-devel-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql-test-12.0.1-lp151.6.9.1.noarch",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-contrib-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-devel-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-docs-10.13-lp151.2.14.1.noarch",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plperl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-plpython-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-pltcl-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-server-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.i586",
            "openSUSE Leap 15.1:postgresql10-test-10.13-lp151.2.14.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-contrib-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-docs-12.3-lp151.2.1.noarch",
            "openSUSE Leap 15.1:postgresql12-llvmjit-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plperl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-plpython-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-pltcl-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-server-devel-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql12-test-12.3-lp151.2.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-contrib-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-devel-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-docs-9.6.19-lp151.3.3.1.noarch",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plperl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-plpython-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-pltcl-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-server-9.6.19-lp151.3.3.1.x86_64",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.i586",
            "openSUSE Leap 15.1:postgresql96-test-9.6.19-lp151.3.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-08-17T10:30:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-1720"
    }
  ]
}

CVE-2019-10130 (GCVE-0-2019-10130)

Vulnerability from cvelistv5

Published

2019-07-30 16:13

Modified

2024-08-04 22:10

Severity ?

3.1 (Low) - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-284

Summary

A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit this to read the most common values of certain columns. Affected columns are those for which the attacker has SELECT privilege and for which, in an ordinary query, row-level security prunes the set of rows visible to the attacker.

References

►

URL

Tags

	https://www.postgresql.org/about/news/1939/	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10130	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/202003-03	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	PostgreSQL Project	postgresql	Version: 11.x up to, excluding 11.3 Version: 10.x up to, excluding 10.8 Version: 9.6.x up to, excluding 9.6.13 Version: 9.5.x up to, excluding 9.5.17

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:10:09.927Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.postgresql.org/about/news/1939/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10130"
          },
          {
            "name": "GLSA-202003-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202003-03"
          },
          {
            "name": "openSUSE-SU-2020:1227",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "postgresql",
          "vendor": "PostgreSQL Project",
          "versions": [
            {
              "status": "affected",
              "version": "11.x up to, excluding 11.3"
            },
            {
              "status": "affected",
              "version": "10.x up to, excluding 10.8"
            },
            {
              "status": "affected",
              "version": "9.6.x up to, excluding 9.6.13"
            },
            {
              "status": "affected",
              "version": "9.5.x up to, excluding 9.5.17"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit this to read the most common values of certain columns. Affected columns are those for which the attacker has SELECT privilege and for which, in an ordinary query, row-level security prunes the set of rows visible to the attacker."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-17T17:06:14",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.postgresql.org/about/news/1939/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10130"
        },
        {
          "name": "GLSA-202003-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202003-03"
        },
        {
          "name": "openSUSE-SU-2020:1227",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2019-10130",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "postgresql",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "11.x up to, excluding 11.3"
                          },
                          {
                            "version_value": "10.x up to, excluding 10.8"
                          },
                          {
                            "version_value": "9.6.x up to, excluding 9.6.13"
                          },
                          {
                            "version_value": "9.5.x up to, excluding 9.5.17"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PostgreSQL Project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit this to read the most common values of certain columns. Affected columns are those for which the attacker has SELECT privilege and for which, in an ordinary query, row-level security prunes the set of rows visible to the attacker."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "3.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-284"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.postgresql.org/about/news/1939/",
              "refsource": "MISC",
              "url": "https://www.postgresql.org/about/news/1939/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10130",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10130"
            },
            {
              "name": "GLSA-202003-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202003-03"
            },
            {
              "name": "openSUSE-SU-2020:1227",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-10130",
    "datePublished": "2019-07-30T16:13:46",
    "dateReserved": "2019-03-27T00:00:00",
    "dateUpdated": "2024-08-04T22:10:09.927Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-10208 (GCVE-0-2019-10208)

Vulnerability from cvelistv5

Published

2019-10-29 13:13

Modified

2024-08-04 22:17

Severity ?

7.5 (High) - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89

Summary

A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.

References

►

URL

Tags

	https://www.postgresql.org/about/news/1960/	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10208	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	PostgreSQL	postgresql	Version: all 11.x before 11.5 Version: all 10.x before 10.10 Version: all 9.6.x before 9.6.15 Version: all 9.5.x before 9.5.19 Version: all 9.4.x before 9.4.24

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:17:18.925Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.postgresql.org/about/news/1960/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10208"
          },
          {
            "name": "openSUSE-SU-2020:1227",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "postgresql",
          "vendor": "PostgreSQL",
          "versions": [
            {
              "status": "affected",
              "version": "all 11.x before 11.5"
            },
            {
              "status": "affected",
              "version": "all 10.x before 10.10"
            },
            {
              "status": "affected",
              "version": "all 9.6.x before 9.6.15"
            },
            {
              "status": "affected",
              "version": "all 9.5.x before 9.5.19"
            },
            {
              "status": "affected",
              "version": "all 9.4.x before 9.4.24"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-17T17:06:11",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.postgresql.org/about/news/1960/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10208"
        },
        {
          "name": "openSUSE-SU-2020:1227",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2019-10208",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "postgresql",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "all 11.x before 11.5"
                          },
                          {
                            "version_value": "all 10.x before 10.10"
                          },
                          {
                            "version_value": "all 9.6.x before 9.6.15"
                          },
                          {
                            "version_value": "all 9.5.x before 9.5.19"
                          },
                          {
                            "version_value": "all 9.4.x before 9.4.24"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PostgreSQL"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "7.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-89"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.postgresql.org/about/news/1960/",
              "refsource": "MISC",
              "url": "https://www.postgresql.org/about/news/1960/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10208",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10208"
            },
            {
              "name": "openSUSE-SU-2020:1227",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-10208",
    "datePublished": "2019-10-29T13:13:12",
    "dateReserved": "2019-03-27T00:00:00",
    "dateUpdated": "2024-08-04T22:17:18.925Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-10915 (GCVE-0-2018-10915)

Vulnerability from cvelistv5

Published

2018-08-09 20:00

Modified

2024-08-05 07:54

Severity ?

8.5 (High) - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE

Summary

A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.

References

►

URL

Tags

	https://security.gentoo.org/glsa/201810-08	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:2729	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2018/dsa-4269	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:2643	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2721	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2511	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3744-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/08/msg00012.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2566	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2565	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10915	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:3816	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/105054	vdb-entry, x_refsource_BID
	https://www.postgresql.org/about/news/1878/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2557	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1041446	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	PostgreSQL Global Development Group	postgresql	Version: 10.5 Version: 9.6.10 Version: 9.5.14 Version: 9.4.19 Version: 9.3.24

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:54:36.359Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-08"
          },
          {
            "name": "RHSA-2018:2729",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2729"
          },
          {
            "name": "DSA-4269",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4269"
          },
          {
            "name": "RHSA-2018:2643",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2643"
          },
          {
            "name": "RHSA-2018:2721",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2721"
          },
          {
            "name": "RHSA-2018:2511",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2511"
          },
          {
            "name": "USN-3744-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3744-1/"
          },
          {
            "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1464-1] postgresql-9.4 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00012.html"
          },
          {
            "name": "RHSA-2018:2566",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2566"
          },
          {
            "name": "RHSA-2018:2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2565"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10915"
          },
          {
            "name": "RHSA-2018:3816",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3816"
          },
          {
            "name": "105054",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105054"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.postgresql.org/about/news/1878/"
          },
          {
            "name": "RHSA-2018:2557",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2557"
          },
          {
            "name": "1041446",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041446"
          },
          {
            "name": "openSUSE-SU-2020:1227",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "postgresql",
          "vendor": "PostgreSQL Global Development Group",
          "versions": [
            {
              "status": "affected",
              "version": "10.5"
            },
            {
              "status": "affected",
              "version": "9.6.10"
            },
            {
              "status": "affected",
              "version": "9.5.14"
            },
            {
              "status": "affected",
              "version": "9.4.19"
            },
            {
              "status": "affected",
              "version": "9.3.24"
            }
          ]
        }
      ],
      "datePublic": "2018-08-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with \"host\" or \"hostaddr\" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-665",
              "description": "CWE-665",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-17T17:06:12",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "GLSA-201810-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-08"
        },
        {
          "name": "RHSA-2018:2729",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2729"
        },
        {
          "name": "DSA-4269",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4269"
        },
        {
          "name": "RHSA-2018:2643",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2643"
        },
        {
          "name": "RHSA-2018:2721",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2721"
        },
        {
          "name": "RHSA-2018:2511",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2511"
        },
        {
          "name": "USN-3744-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3744-1/"
        },
        {
          "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1464-1] postgresql-9.4 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00012.html"
        },
        {
          "name": "RHSA-2018:2566",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2566"
        },
        {
          "name": "RHSA-2018:2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2565"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10915"
        },
        {
          "name": "RHSA-2018:3816",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3816"
        },
        {
          "name": "105054",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105054"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.postgresql.org/about/news/1878/"
        },
        {
          "name": "RHSA-2018:2557",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2557"
        },
        {
          "name": "1041446",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041446"
        },
        {
          "name": "openSUSE-SU-2020:1227",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2018-10915",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "postgresql",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "10.5"
                          },
                          {
                            "version_value": "9.6.10"
                          },
                          {
                            "version_value": "9.5.14"
                          },
                          {
                            "version_value": "9.4.19"
                          },
                          {
                            "version_value": "9.3.24"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PostgreSQL Global Development Group"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with \"host\" or \"hostaddr\" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "8.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-665"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-200"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-89"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-08",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-08"
            },
            {
              "name": "RHSA-2018:2729",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2729"
            },
            {
              "name": "DSA-4269",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4269"
            },
            {
              "name": "RHSA-2018:2643",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2643"
            },
            {
              "name": "RHSA-2018:2721",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2721"
            },
            {
              "name": "RHSA-2018:2511",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2511"
            },
            {
              "name": "USN-3744-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3744-1/"
            },
            {
              "name": "[debian-lts-announce] 20180815 [SECURITY] [DLA 1464-1] postgresql-9.4 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/08/msg00012.html"
            },
            {
              "name": "RHSA-2018:2566",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2566"
            },
            {
              "name": "RHSA-2018:2565",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2565"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10915",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10915"
            },
            {
              "name": "RHSA-2018:3816",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3816"
            },
            {
              "name": "105054",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105054"
            },
            {
              "name": "https://www.postgresql.org/about/news/1878/",
              "refsource": "CONFIRM",
              "url": "https://www.postgresql.org/about/news/1878/"
            },
            {
              "name": "RHSA-2018:2557",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2557"
            },
            {
              "name": "1041446",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041446"
            },
            {
              "name": "openSUSE-SU-2020:1227",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-10915",
    "datePublished": "2018-08-09T20:00:00",
    "dateReserved": "2018-05-09T00:00:00",
    "dateUpdated": "2024-08-05T07:54:36.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-1115 (GCVE-0-2018-1115)

Vulnerability from cvelistv5

Published

2018-05-10 19:00

Modified

2024-08-05 03:51

Severity ?

4.2 (Medium) - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

CWE

CWE-732

Summary

postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.

References

►

URL

Tags

	https://security.gentoo.org/glsa/201810-08	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2018:2566	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2565	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/104285	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1115	x_refsource_CONFIRM
	https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=7b34740	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	unspecified	postgresql	Version: postegresql 10.4 Version: postegresql 9.6.9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:51:48.772Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-08"
          },
          {
            "name": "RHSA-2018:2566",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2566"
          },
          {
            "name": "RHSA-2018:2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2565"
          },
          {
            "name": "104285",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104285"
          },
          {
            "name": "openSUSE-SU-2020:1227",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1115"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=7b34740"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "postgresql",
          "vendor": "unspecified",
          "versions": [
            {
              "status": "affected",
              "version": "postegresql 10.4"
            },
            {
              "status": "affected",
              "version": " postegresql 9.6.9"
            }
          ]
        }
      ],
      "datePublic": "2018-04-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn\u0027t follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-732",
              "description": "CWE-732",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-12-04T18:00:58",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "GLSA-201810-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-08"
        },
        {
          "name": "RHSA-2018:2566",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2566"
        },
        {
          "name": "RHSA-2018:2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2565"
        },
        {
          "name": "104285",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104285"
        },
        {
          "name": "openSUSE-SU-2020:1227",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1115"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=7b34740"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2018-1115",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "postgresql",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "postegresql 10.4"
                          },
                          {
                            "version_value": " postegresql 9.6.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": ""
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn\u0027t follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "4.2/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-732"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-08",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-08"
            },
            {
              "name": "RHSA-2018:2566",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2566"
            },
            {
              "name": "RHSA-2018:2565",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2565"
            },
            {
              "name": "104285",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104285"
            },
            {
              "name": "openSUSE-SU-2020:1227",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1115",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1115"
            },
            {
              "name": "https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=7b34740",
              "refsource": "CONFIRM",
              "url": "https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=7b34740"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-1115",
    "datePublished": "2018-05-10T19:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T03:51:48.772Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-1720 (GCVE-0-2020-1720)

Vulnerability from cvelistv5

Published

2020-03-17 15:28

Modified

2024-08-04 06:46

Severity ?

3.1 (Low) - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-285

Summary

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17.

References

►

URL

Tags

	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1720	x_refsource_CONFIRM
	https://www.postgresql.org/about/news/2011/	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	Red Hat	postgresql	Version: 12.2 Version: 11.7 Version: 10.12 Version: 9.6.17

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T06:46:30.847Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1720"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.postgresql.org/about/news/2011/"
          },
          {
            "name": "openSUSE-SU-2020:1227",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "postgresql",
          "vendor": "Red Hat",
          "versions": [
            {
              "status": "affected",
              "version": "12.2"
            },
            {
              "status": "affected",
              "version": "11.7"
            },
            {
              "status": "affected",
              "version": "10.12"
            },
            {
              "status": "affected",
              "version": "9.6.17"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in PostgreSQL\u0027s \"ALTER ... DEPENDS ON EXTENSION\", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "CWE-285",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-17T17:06:13",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1720"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.postgresql.org/about/news/2011/"
        },
        {
          "name": "openSUSE-SU-2020:1227",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2020-1720",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "postgresql",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "12.2"
                          },
                          {
                            "version_value": "11.7"
                          },
                          {
                            "version_value": "10.12"
                          },
                          {
                            "version_value": "9.6.17"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Red Hat"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A flaw was found in PostgreSQL\u0027s \"ALTER ... DEPENDS ON EXTENSION\", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-285"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1720",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1720"
            },
            {
              "name": "https://www.postgresql.org/about/news/2011/",
              "refsource": "MISC",
              "url": "https://www.postgresql.org/about/news/2011/"
            },
            {
              "name": "openSUSE-SU-2020:1227",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2020-1720",
    "datePublished": "2020-03-17T15:28:24",
    "dateReserved": "2019-11-27T00:00:00",
    "dateUpdated": "2024-08-04T06:46:30.847Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-14350 (GCVE-0-2020-14350)

Vulnerability from cvelistv5

Published

2020-08-24 12:42

Modified

2024-08-04 12:39

Severity ?

CWE

Improper Input Validation

Summary

It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=1865746	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2020/08/msg00028.html	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/202008-13	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/4472-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00003.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00008.html	vendor-advisory, x_refsource_SUSE
	https://security.netapp.com/advisory/ntap-20200918-0002/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	PostgreSQL	Version: PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T12:39:36.524Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2020:1227",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
          },
          {
            "name": "openSUSE-SU-2020:1228",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html"
          },
          {
            "name": "openSUSE-SU-2020:1244",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html"
          },
          {
            "name": "openSUSE-SU-2020:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1865746"
          },
          {
            "name": "[debian-lts-announce] 20200817 [SECURITY] [DLA 2331-1] posgresql-9.6 security update",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00028.html"
          },
          {
            "name": "GLSA-202008-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202008-13"
          },
          {
            "name": "USN-4472-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4472-1/"
          },
          {
            "name": "openSUSE-SU-2020:1312",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00003.html"
          },
          {
            "name": "openSUSE-SU-2020:1326",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200918-0002/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PostgreSQL",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Improper Input Validation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-18T11:06:17",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "openSUSE-SU-2020:1227",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
        },
        {
          "name": "openSUSE-SU-2020:1228",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html"
        },
        {
          "name": "openSUSE-SU-2020:1244",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html"
        },
        {
          "name": "openSUSE-SU-2020:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1865746"
        },
        {
          "name": "[debian-lts-announce] 20200817 [SECURITY] [DLA 2331-1] posgresql-9.6 security update",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00028.html"
        },
        {
          "name": "GLSA-202008-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202008-13"
        },
        {
          "name": "USN-4472-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4472-1/"
        },
        {
          "name": "openSUSE-SU-2020:1312",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00003.html"
        },
        {
          "name": "openSUSE-SU-2020:1326",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200918-0002/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2020-14350",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PostgreSQL",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2020:1227",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
            },
            {
              "name": "openSUSE-SU-2020:1228",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html"
            },
            {
              "name": "openSUSE-SU-2020:1244",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html"
            },
            {
              "name": "openSUSE-SU-2020:1243",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1865746",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1865746"
            },
            {
              "name": "[debian-lts-announce] 20200817 [SECURITY] [DLA 2331-1] posgresql-9.6 security update",
              "refsource": "DEBIAN",
              "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00028.html"
            },
            {
              "name": "GLSA-202008-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202008-13"
            },
            {
              "name": "USN-4472-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4472-1/"
            },
            {
              "name": "openSUSE-SU-2020:1312",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00003.html"
            },
            {
              "name": "openSUSE-SU-2020:1326",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00008.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200918-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200918-0002/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2020-14350",
    "datePublished": "2020-08-24T12:42:45",
    "dateReserved": "2020-06-17T00:00:00",
    "dateUpdated": "2024-08-04T12:39:36.524Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-10925 (GCVE-0-2018-10925)

Vulnerability from cvelistv5

Published

2018-08-09 21:00

Modified

2024-08-05 07:54

Severity ?

7.1 (High) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CWE

CWE-863

Summary

It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ... ON CONFLICT DO UPDATE". An attacker with "CREATE TABLE" privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain "INSERT" and limited "UPDATE" privileges to a particular table, they could exploit this to update other columns in the same table.

References

►

URL

Tags

	https://security.gentoo.org/glsa/201810-08	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2018/dsa-4269	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/105052	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2018:2511	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3744-1/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10925	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2566	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2565	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:3816	vendor-advisory, x_refsource_REDHAT
	https://www.postgresql.org/about/news/1878/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041446	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	PostgreSQL Global Development Group	postgresql	Version: 10.5 Version: 9.6.10 Version: 9.5.14 Version: 9.4.19 Version: 9.3.24

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:54:36.061Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-08"
          },
          {
            "name": "DSA-4269",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4269"
          },
          {
            "name": "105052",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105052"
          },
          {
            "name": "RHSA-2018:2511",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2511"
          },
          {
            "name": "USN-3744-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3744-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10925"
          },
          {
            "name": "RHSA-2018:2566",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2566"
          },
          {
            "name": "RHSA-2018:2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2565"
          },
          {
            "name": "RHSA-2018:3816",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3816"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.postgresql.org/about/news/1878/"
          },
          {
            "name": "1041446",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041446"
          },
          {
            "name": "openSUSE-SU-2020:1227",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "postgresql",
          "vendor": "PostgreSQL Global Development Group",
          "versions": [
            {
              "status": "affected",
              "version": "10.5"
            },
            {
              "status": "affected",
              "version": "9.6.10"
            },
            {
              "status": "affected",
              "version": "9.5.14"
            },
            {
              "status": "affected",
              "version": "9.4.19"
            },
            {
              "status": "affected",
              "version": "9.3.24"
            }
          ]
        }
      ],
      "datePublic": "2018-08-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with \"INSERT ... ON CONFLICT DO UPDATE\". An attacker with \"CREATE TABLE\" privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain \"INSERT\" and limited \"UPDATE\" privileges to a particular table, they could exploit this to update other columns in the same table."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-17T17:06:15",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "GLSA-201810-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-08"
        },
        {
          "name": "DSA-4269",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4269"
        },
        {
          "name": "105052",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105052"
        },
        {
          "name": "RHSA-2018:2511",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2511"
        },
        {
          "name": "USN-3744-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3744-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10925"
        },
        {
          "name": "RHSA-2018:2566",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2566"
        },
        {
          "name": "RHSA-2018:2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2565"
        },
        {
          "name": "RHSA-2018:3816",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3816"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.postgresql.org/about/news/1878/"
        },
        {
          "name": "1041446",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041446"
        },
        {
          "name": "openSUSE-SU-2020:1227",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2018-10925",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "postgresql",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "10.5"
                          },
                          {
                            "version_value": "9.6.10"
                          },
                          {
                            "version_value": "9.5.14"
                          },
                          {
                            "version_value": "9.4.19"
                          },
                          {
                            "version_value": "9.3.24"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "PostgreSQL Global Development Group"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with \"INSERT ... ON CONFLICT DO UPDATE\". An attacker with \"CREATE TABLE\" privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain \"INSERT\" and limited \"UPDATE\" privileges to a particular table, they could exploit this to update other columns in the same table."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-863"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-08",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-08"
            },
            {
              "name": "DSA-4269",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4269"
            },
            {
              "name": "105052",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105052"
            },
            {
              "name": "RHSA-2018:2511",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2511"
            },
            {
              "name": "USN-3744-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3744-1/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10925",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10925"
            },
            {
              "name": "RHSA-2018:2566",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2566"
            },
            {
              "name": "RHSA-2018:2565",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2565"
            },
            {
              "name": "RHSA-2018:3816",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3816"
            },
            {
              "name": "https://www.postgresql.org/about/news/1878/",
              "refsource": "CONFIRM",
              "url": "https://www.postgresql.org/about/news/1878/"
            },
            {
              "name": "1041446",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041446"
            },
            {
              "name": "openSUSE-SU-2020:1227",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-10925",
    "datePublished": "2018-08-09T21:00:00",
    "dateReserved": "2018-05-09T00:00:00",
    "dateUpdated": "2024-08-05T07:54:36.061Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

opensuse-su-2020:1227-1

Vulnerability from csaf_opensuse

CVE-2019-10130 (GCVE-0-2019-10130)

Vulnerability from cvelistv5

CVE-2019-10208 (GCVE-0-2019-10208)

Vulnerability from cvelistv5

CVE-2018-10915 (GCVE-0-2018-10915)

Vulnerability from cvelistv5

CVE-2018-1115 (GCVE-0-2018-1115)

Vulnerability from cvelistv5

CVE-2020-1720 (GCVE-0-2020-1720)

Vulnerability from cvelistv5

CVE-2020-14350 (GCVE-0-2020-14350)

Vulnerability from cvelistv5

CVE-2018-10925 (GCVE-0-2018-10925)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature