Red Hat Security AdvisoryRHSA-2024:0975
postgresql:13 security update
Released 2024-02-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.s390x::postgresql:13 +47
Fixes 1 record
Priority MEDIUM 40
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01808 · Published 2024-02-08 · Partial fix · 16.2, 15.6 +3 CWE-271
