Red Hat Security AdvisoryRHSA-2023:7788
postgresql:10 security update
Released 2023-12-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) postgresql-10.21-3.module+el8.2.0+20828+77647308.src::postgresql:10, postgresql-10.21-3.module+el8.2.0+20828+77647308.x86_64::postgresql:10, postgresql-contrib-10.21-3.module+el8.2.0+20828+77647308.x86_64::postgresql:10 +11
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) postgresql-10.21-3.module+el8.2.0+20828+77647308.ppc64le::postgresql:10, postgresql-10.21-3.module+el8.2.0+20828+77647308.src::postgresql:10, postgresql-10.21-3.module+el8.2.0+20828+77647308.x86_64::postgresql:10 +24
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) postgresql-10.21-3.module+el8.2.0+20828+77647308.src::postgresql:10, postgresql-10.21-3.module+el8.2.0+20828+77647308.x86_64::postgresql:10, postgresql-contrib-10.21-3.module+el8.2.0+20828+77647308.x86_64::postgresql:10 +11
Fixes 1 record
Priority MEDIUM 47
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04322 · Published 2023-12-10 · Partial fix · 4.2.4-6, 4.2.4-7 +29 CWE-190
