Red Hat Security AdvisoryRHSA-2024:10879
postgresql:13 security update
Released 2024-12-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.2) postgresql-docs-13.18-1.el9_2, postgresql-private-devel-13.18-1.el9_2, postgresql-server-devel-13.18-1.el9_2 +3
- Red Hat Enterprise Linux AppStream EUS (v.9.2) postgresql-13.18-1.el9_2, postgresql-contrib-13.18-1.el9_2, postgresql-plperl-13.18-1.el9_2 +5
Fixes 1 record
Priority MEDIUM 47
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04393 · Published 2024-11-14 · Partial fix · 17.1, 16.5 +4 CWE-15
