Red Hat Security Advisory

RHSA-2023:7783

postgresql security update

Released 2023-12-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) postgresql-9.2.24-9.el7_9, postgresql-libs-9.2.24-9.el7_9
Red Hat Enterprise Linux Client Optional (v. 7) postgresql-9.2.24-9.el7_9, postgresql-contrib-9.2.24-9.el7_9, postgresql-devel-9.2.24-9.el7_9 +8
Red Hat Enterprise Linux ComputeNode Optional (v. 7) postgresql-9.2.24-9.el7_9, postgresql-contrib-9.2.24-9.el7_9, postgresql-devel-9.2.24-9.el7_9 +8
Red Hat Enterprise Linux Server (v. 7) postgresql-9.2.24-9.el7_9, postgresql-9.2.24-9.el7_9.ppc, postgresql-contrib-9.2.24-9.el7_9 +10
Red Hat Enterprise Linux Server Optional (v. 7) postgresql-static-9.2.24-9.el7_9, postgresql-static-9.2.24-9.el7_9.ppc, postgresql-upgrade-9.2.24-9.el7_9
Red Hat Enterprise Linux Workstation (v. 7) postgresql-9.2.24-9.el7_9, postgresql-contrib-9.2.24-9.el7_9, postgresql-devel-9.2.24-9.el7_9 +6
Red Hat Enterprise Linux Workstation Optional (v. 7) postgresql-docs-9.2.24-9.el7_9, postgresql-static-9.2.24-9.el7_9, postgresql-upgrade-9.2.24-9.el7_9

Fixes 1 record

TI-2023-05404 CVE-2023-5869 · GHSA-9625-p7pg-3cxg

Postgresql: buffer overrun from integer overflow in array modification

MEDIUM 47

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04322 Published 2023-12-10 Partial fix · 4.2.4-6, 4.2.4-7 +29 CWE-190