SUSE-RU-2020:1280-1: postgresql10&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise
Vulnerability summary
SUSE-RU-2020:1280-1 is a vulnerability in postgresql10&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 14-05-2020PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Recommended update for postgresql, postgresql10, postgresql12 This update for postgresql, postgresql10, postgresql12 fixes the following issues: Changes in the postgresql wrapper package: - Sync ownership of /run/postgresql in the file list with tmpfiles. - Use the correct content for .bash_profile (bsc#1153168). - Stop shipping SUSEfirewall2 config files (bsc#1151591). - Use /run/postgresql instead of /var/run/postgresql in %ghost and postgresql-tmpfiles.conf to avoid rpmlint warnings and errors. - add /var/run/postgresql to the filelist. as %ghost for systemd systems and directly for non systemd systems Changes in postgresql10: - packaging changed to no longer build the libraries, these now come from postgresql12. Changes in postgresql12: Initial package for the postgresql 12 branch https://www.postgresql.org/about/news/1976/ - Update to 12.2 (CVE-2020-1720) https://www.postgresql.org/about/news/2011/ https://www.postgresql.org/docs/12/release-12-2.html - Avoid the dependency from the devel package to the main package. devel packages are exclusive, thus ecpg does not require update-alternatives. - Remove unused build dependencies from the client libs package: LVM, icu, selinux, systemd. - Update to 12.1 https://www.postgresql.org/docs/12/release-12-1.html https://www.postgresql.org/about/news/1994/ - add requires to the server-devel package for the libs that are returned by pg_config --libs python-psycopg2 was updated to 2.8.4 to allow working with postgresql12.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse9 products
- postgresql10&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1< 10.12-8.13.9
- postgresql10&distro=SUSE Linux Enterprise Module for Server Applications 15 SP1< 10.12-8.13.9
- postgresql12-libs&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1< 12.2-3.5.2
- postgresql12-libs&distro=SUSE Linux Enterprise Module for Server Applications 15 SP1< 12.2-3.5.2
- postgresql12&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1< 12.2-3.5.2
1 vendor · 9 products