Red Hat Security Advisory

RHSA-2024:6138

postgresql:12 security update

Released 2024-09-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.src::postgresql:12 +15

Fixes 1 record

TI-2024-06809 CVE-2024-7348 · GHSA-3c6g-7v4g-5xcm

PostgreSQL relation replacement during pg_dump executes arbitrary SQL

MEDIUM 43

Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01565 Published 2024-08-08 Fixed in 16.4, 15.8 +3 CWE-367