Red Hat Security Advisory

RHSA-2024:6140

postgresql:15 security update

Released 2024-09-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.2) pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15 +47

Fixes 1 record

TI-2024-06809 CVE-2024-7348 · GHSA-3c6g-7v4g-5xcm

PostgreSQL relation replacement during pg_dump executes arbitrary SQL

MEDIUM 43

Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01565 Published 2024-08-08 Fixed in 16.4, 15.8 +3 CWE-367