Red Hat Security AdvisoryRHSA-2024:10791
postgresql security update
Released 2024-12-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) postgresql-docs-13.18-1.el9_5, postgresql-private-devel-13.18-1.el9_5, postgresql-server-devel-13.18-1.el9_5 +4
- Red Hat Enterprise Linux AppStream (v. 9) postgresql-13.18-1.el9_5, postgresql-contrib-13.18-1.el9_5, postgresql-plperl-13.18-1.el9_5 +5
Fixes 3 records
Priority MEDIUM 47
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04393 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-15
Priority LOW 26
Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00769 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-1250
Priority LOW 21
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended.
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.0069 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-266
