Red Hat Security AdvisoryRHSA-2024:6001
postgresql:15 security update
Released 2024-08-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.s390x::postgresql:15 +47
Fixes 2 records
Priority MEDIUM 43
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01565 · Published 2024-08-08 · Fixed in 16.4, 15.8 +3 CWE-367
Priority LOW 21
Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs allows an unprivileged database user to read most common values and other statistics from CREATE STATISTICS commands of other users.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00728 · Published 2024-05-09 · Partial fix · 16.3, 15.7 +1 CWE-862
