Red Hat Security Advisory

RHSA-2024:10882

postgresql security update

Released 2024-12-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) postgresql-9.2.24-9.el7_9.2, postgresql-9.2.24-9.el7_9.2.ppc, postgresql-contrib-9.2.24-9.el7_9.2 +10
Red Hat Enterprise Linux Server Optional (v. 7 ELS) postgresql-static-9.2.24-9.el7_9.2, postgresql-static-9.2.24-9.el7_9.2.ppc, postgresql-upgrade-9.2.24-9.el7_9.2

Fixes 1 record

TI-2024-10177 CVE-2024-10979 · GHSA-2r9h-x757-8j9q

PostgreSQL PL/Perl environment variable changes execute arbitrary code

MEDIUM 47

Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04393 Published 2024-11-14 Partial fix · 17.1, 16.5 +4 CWE-15