Red Hat Security AdvisoryRHSA-2024:10832
postgresql:13 security update
Released 2024-12-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.s390x::postgresql:13 +47
Fixes 3 records
Priority MEDIUM 47
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04393 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-15
Priority LOW 26
Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00769 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-1250
Priority LOW 21
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended.
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.0069 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-266
