# CVE-2019-10130: postgresql: PostgreSQL is an advanced object-relational database management system (DBMS).  The following packages have been upgr...

CVE-2019-10130 is fixed in 25 products on 1 platform, first by libecpg-compat3 10.8-0ubuntu0.18.04.1, released May 8, 2019. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2019-10130
- Priority: Routine
- CVSS: 4.3 (Important)
- EPSS: 0.0109
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 8, 2019

## Description

PostgreSQL is an advanced object-relational database management system (DBMS).  The following packages have been upgraded to a later upstream version: postgresql (9.6.20).  Security Fix(es):  * postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)  * postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695)  * postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)  * postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)  * postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)  * postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130)  * postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libecpg-compat3 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [libecpg-compat3 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libecpg-compat3-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | libecpg6 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [libecpg6 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libecpg6-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | libpgtypes3 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [libpgtypes3 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpgtypes3-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | libpq5 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [libpq5 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpq5-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | postgresql RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-10 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [postgresql-10 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-postgresql-10-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | postgresql-client-10 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [postgresql-client-10 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-postgresql-client-10-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | postgresql-contrib RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql-contrib ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-doc-10 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [postgresql-doc-10 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-postgresql-doc-10-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | postgresql-docs RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql-docs ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-plperl RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql-plperl ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-plperl-10 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [postgresql-plperl-10 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-postgresql-plperl-10-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | postgresql-plpython-10 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [postgresql-plpython-10 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-postgresql-plpython-10-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | postgresql-plpython3 RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql-plpython3 ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-plpython3-10 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [postgresql-plpython3-10 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-postgresql-plpython3-10-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | postgresql-pltcl RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql-pltcl ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-pltcl-10 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [postgresql-pltcl-10 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-postgresql-pltcl-10-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | postgresql-server RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql-server ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-server-dev-10 Ubuntu 18.04.6 LTS (bionic) | 10.8-0ubuntu0.18.04.1 | [postgresql-server-dev-10 10.8-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-postgresql-server-dev-10-10.8-0ubuntu0.18.04.1.md) | May 8, 2019 |
| Linux | postgresql-server-devel RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql-server-devel ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-static RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql-static ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-test RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql-test ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-test-rpm-macros RHEL 8 | 0:9.6.20-1.module+el8.3.0+8938+7f0e88b6 | [RHSA-2020:5619](https://patchblox.com/security/data/fix/linux/rhsa-2020-5619.md) | Dec 17, 2020 |
| Linux | postgresql-test-rpm-macros ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-upgrade RHEL 8 | 0:10.14-1.module+el8.2.0+7801+be0fed80 | [RHSA-2020:3669](https://patchblox.com/security/data/fix/linux/rhsa-2020-3669.md) | Sep 8, 2020 |
| Linux | postgresql-upgrade ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |
| Linux | postgresql-upgrade-devel RHEL 8 | 0:10.14-1.module+el8.2.0+7801+be0fed80 | [RHSA-2020:3669](https://patchblox.com/security/data/fix/linux/rhsa-2020-3669.md) | Sep 8, 2020 |
| Linux | postgresql-upgrade-devel ol 8 | 0:10.14-1.module+el8.2.0+7785+0ea9f177 | [ELSA-2020-3669](https://patchblox.com/security/data/fix/linux/elsa-2020-3669.md) | Sep 9, 2020 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo