Red Hat Security Advisory

RHSA-2024:6144

postgresql security update

Released 2024-09-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.0) postgresql-13.16-1.el9_0, postgresql-contrib-13.16-1.el9_0, postgresql-plperl-13.16-1.el9_0 +5

Fixes 1 record

TI-2024-06809 CVE-2024-7348 · GHSA-3c6g-7v4g-5xcm

PostgreSQL relation replacement during pg_dump executes arbitrary SQL

MEDIUM 43

Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01565 Published 2024-08-08 Fixed in 16.4, 15.8 +3 CWE-367