Red Hat Security Advisory

RHSA-2024:10827

postgresql security update

Released 2024-12-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.0) postgresql-13.18-1.el9_0, postgresql-contrib-13.18-1.el9_0, postgresql-plperl-13.18-1.el9_0 +5

Fixes 1 record

TI-2024-10177 CVE-2024-10979 · GHSA-2r9h-x757-8j9q

PostgreSQL PL/Perl environment variable changes execute arbitrary code

MEDIUM 47

Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04393 Published 2024-11-14 Partial fix · 17.1, 16.5 +4 CWE-15