Red Hat Security AdvisoryRHSA-2024:1240
postgresql security update
Released 2024-03-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.0) postgresql-private-devel-13.14-1.el9_0, postgresql-server-devel-13.14-1.el9_0, postgresql-test-13.14-1.el9_0
- Red Hat Enterprise Linux AppStream EUS (v.9.0) postgresql-13.14-1.el9_0, postgresql-contrib-13.14-1.el9_0, postgresql-plperl-13.14-1.el9_0 +5
Fixes 1 record
Priority MEDIUM 40
Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01808 · Published 2024-02-08 · Partial fix · 16.2, 15.6 +3 CWE-271
