Red Hat Security AdvisoryRHSA-2024:5999
postgresql security update
Released 2024-08-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) postgresql-13.16-1.el9_4, postgresql-contrib-13.16-1.el9_4, postgresql-plperl-13.16-1.el9_4 +5
- Red Hat Enterprise Linux CRB (v. 9) postgresql-docs-13.16-1.el9_4, postgresql-private-devel-13.16-1.el9_4, postgresql-server-devel-13.16-1.el9_4 +3
Fixes 1 record
Priority MEDIUM 43
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01565 · Published 2024-08-08 · Fixed in 16.4, 15.8 +3 CWE-367
