Red Hat Security AdvisoryRHSA-2024:10785
postgresql:12 security update
Released 2024-12-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.s390x::postgresql:12 +47
Fixes 3 records
Priority MEDIUM 47
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04393 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-15
Priority LOW 26
Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00769 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-1250
Priority LOW 21
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended.
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.0069 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-266
