RHSA-2023:7771: Important: rh-postgresql10-postgresql security update
Published Dec 13, 2023
·Updated
Important: rh-postgresql10-postgresql security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).Security Fix(es): postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
49 affected componentsFixes available
redhat/rh-postgresql10-postgresql<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-contrib<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-contrib-syspaths<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-debuginfo<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-devel<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-docs<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-libs<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-plperl<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-plpython<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-pltcl<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-server<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-server-syspaths<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-static<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-syspaths<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-test<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-contrib<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-contrib-syspaths<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-debuginfo<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-devel<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-docs<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-libs<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-plperl<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-plpython<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-pltcl<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-server<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-server-syspaths<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-static<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-syspaths<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-test<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-contrib<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-contrib-syspaths<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-debuginfo<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-devel<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-docs<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-libs<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-plperl<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-plpython<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-pltcl<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-server<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-server-syspaths<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-static<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-syspaths<10.23-2.el7
10.23-2.el7
redhat/rh-postgresql10-postgresql-test<10.23-2.el7
10.23-2.el7
Red Hat Red Hat Software Collections (for RHEL Workstation)
Red Hat Red Hat Software Collections (for RHEL Server for IBM Power LE)
Red Hat Red Hat Software Collections (for RHEL Server for System Z)
Red Hat Red Hat Software Collections (for RHEL Server)
Remediation
Event History
Dec 13, 2023
Advisory Published
via Red Hat·12:00 AM
Advisory Published
07:47 AM
Frequently Asked Questions
1
What is the severity of RHSA-2023:7771?
The severity of RHSA-2023:7771 is classified as Important.
2
How do I fix RHSA-2023:7771?
To fix RHSA-2023:7771, update the affected packages to version 10.23-2.el7.
3
What is CVE-2023-5869 as related to RHSA-2023:7771?
CVE-2023-5869 refers to a buffer overrun vulnerability caused by an integer overflow in array modification.
4
Which software is affected by RHSA-2023:7771?
RHSA-2023:7771 affects several Red Hat Software Collections packages, including rh-postgresql10-postgresql and its related contrib packages.
5
When was RHSA-2023:7771 issued?
RHSA-2023:7771 was issued as a security update for vulnerabilities affecting PostgreSQL.