Red Hat Security AdvisoryRHSA-2024:6145
postgresql security update
Released 2024-09-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.2) postgresql-docs-13.16-1.el9_2, postgresql-private-devel-13.16-1.el9_2, postgresql-server-devel-13.16-1.el9_2 +3
- Red Hat Enterprise Linux AppStream EUS (v.9.2) postgresql-13.16-1.el9_2, postgresql-contrib-13.16-1.el9_2, postgresql-plperl-13.16-1.el9_2 +5
Fixes 1 record
Priority MEDIUM 43
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01565 · Published 2024-08-08 · Fixed in 16.4, 15.8 +3 CWE-367
