Red Hat Security Advisory

RHSA-2024:0992

rh-postgresql10-postgresql security update

Released 2024-02-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for RHEL Workstation(v. 7) rh-postgresql10-postgresql-10.23-3.el7, rh-postgresql10-postgresql-contrib-10.23-3.el7, rh-postgresql10-postgresql-contrib-syspaths-10.23-3.el7 +11
Red Hat Software Collections for RHEL(v. 7) rh-postgresql10-postgresql-10.23-3.el7, rh-postgresql10-postgresql-contrib-10.23-3.el7, rh-postgresql10-postgresql-contrib-syspaths-10.23-3.el7 +11

Fixes 1 record

TI-2024-00908 CVE-2024-0985 · GHSA-4828-5p9m-g4ff

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

MEDIUM 40

Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01808 Published 2024-02-08 Partial fix · 16.2, 15.6 +3 CWE-271