Red Hat Security Advisory

RHSA-2024:10595

postgresql security update

Released 2024-12-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) postgresql-docs-13.18-1.el9_4, postgresql-private-devel-13.18-1.el9_4, postgresql-server-devel-13.18-1.el9_4 +3
Red Hat Enterprise Linux AppStream EUS (v.9.4) postgresql-13.18-1.el9_4, postgresql-contrib-13.18-1.el9_4, postgresql-plperl-13.18-1.el9_4 +5

Fixes 1 record

TI-2024-10177 CVE-2024-10979 · GHSA-2r9h-x757-8j9q

PostgreSQL PL/Perl environment variable changes execute arbitrary code

MEDIUM 47

Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04393 Published 2024-11-14 Partial fix · 17.1, 16.5 +4 CWE-15