Red Hat Security Advisory

RHSA-2024:8495

postgresql security update

Released 2024-10-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) postgresql-9.2.24-9.el7_9.1, postgresql-9.2.24-9.el7_9.1.ppc, postgresql-contrib-9.2.24-9.el7_9.1 +10
Red Hat Enterprise Linux Server Optional (v. 7 ELS) postgresql-static-9.2.24-9.el7_9.1, postgresql-static-9.2.24-9.el7_9.1.ppc, postgresql-upgrade-9.2.24-9.el7_9.1

Fixes 1 record

TI-2024-06809 CVE-2024-7348 · GHSA-3c6g-7v4g-5xcm

PostgreSQL relation replacement during pg_dump executes arbitrary SQL

MEDIUM 43

Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01565 Published 2024-08-08 Fixed in 16.4, 15.8 +3 CWE-367