Red Hat Security AdvisoryRHSA-2024:10787
postgresql:15 security update
Released 2024-12-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) pg_repack-1.4.8-2.module+el9.5.0+22224+f5585c78.aarch64::postgresql:15, pg_repack-1.4.8-2.module+el9.5.0+22224+f5585c78.ppc64le::postgresql:15, pg_repack-1.4.8-2.module+el9.5.0+22224+f5585c78.s390x::postgresql:15 +47
Fixes 3 records
Priority MEDIUM 47
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04393 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-15
Priority LOW 26
Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00769 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-1250
Priority LOW 21
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended.
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.0069 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-266
