Red Hat Security AdvisoryRHSA-2023:7878
postgresql:10 security update
Released 2023-12-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) postgresql-10.21-3.module+el8.4.0+20772+e1ad5372.src::postgresql:10, postgresql-10.21-3.module+el8.4.0+20772+e1ad5372.x86_64::postgresql:10, postgresql-contrib-10.21-3.module+el8.4.0+20772+e1ad5372.x86_64::postgresql:10 +11
- Red Hat Enterprise Linux AppStream E4S (v.8.4) postgresql-10.21-3.module+el8.4.0+20772+e1ad5372.aarch64::postgresql:10, postgresql-10.21-3.module+el8.4.0+20772+e1ad5372.ppc64le::postgresql:10, postgresql-10.21-3.module+el8.4.0+20772+e1ad5372.s390x::postgresql:10 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.4) postgresql-10.21-3.module+el8.4.0+20772+e1ad5372.src::postgresql:10, postgresql-10.21-3.module+el8.4.0+20772+e1ad5372.x86_64::postgresql:10, postgresql-contrib-10.21-3.module+el8.4.0+20772+e1ad5372.x86_64::postgresql:10 +11
Fixes 1 record
Priority MEDIUM 47
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04322 · Published 2023-12-10 · Partial fix · 4.2.4-6, 4.2.4-7 +29 CWE-190
