RHSA-2024:0950: Important: postgresql:15 security update
Published Feb 22, 2024
·Updated
Important: postgresql:15 security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).<br>Security Fix(es):<br><li> postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
135 affected componentsFixes available
redhat/pgaudit<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgresql<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-test-rpm-macros<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/pgaudit<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/pgaudit-debuginfo<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/pgaudit-debugsource<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgresql<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-contrib<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-contrib-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-debugsource<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-docs<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-docs-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plperl<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plperl-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plpython3<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-pltcl<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-private-devel<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-private-libs<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server-devel<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-static<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-test<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-test-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade-devel<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/pgaudit-debuginfo<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/pgaudit-debugsource<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgresql-contrib<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-contrib-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-debugsource<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-docs<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-docs-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plperl<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plperl-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plpython3<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-pltcl<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-private-devel<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-private-libs<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server-devel<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-static<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-test<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-test-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade-devel<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/pgaudit<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/pgaudit-debuginfo<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/pgaudit-debugsource<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgresql<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-contrib<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-contrib-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-debugsource<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-docs<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-docs-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plperl<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plperl-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plpython3<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-pltcl<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-private-devel<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-private-libs<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server-devel<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-static<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-test<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-test-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade-devel<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6
15.6-1.module+el9.3.0+21283+b0ea34b6
redhat/pgaudit<1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
redhat/pgaudit-debuginfo<1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
redhat/pgaudit-debugsource<1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
redhat/postgresql<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-contrib<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-contrib-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-debugsource<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-docs<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-docs-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-plperl<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-plperl-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-plpython3<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-pltcl<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-private-devel<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-private-libs<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-server<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-server-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-server-devel<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-static<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-test<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-test-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-upgrade<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-upgrade-devel<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el9.3.0+21283+b0ea34b6.aa
15.6-1.module+el9.3.0+21283+b0ea34b6.aa
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for Power, little endian
Remediation
Event History
Feb 22, 2024
Advisory Published
via Red Hat·03:33 PM
Oct 3, 2024
Advisory Published
via Red Hat·04:46 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:0950?
The severity of RHSA-2024:0950 is classified as important due to the potential for non-owner execution of arbitrary SQL.
2
How do I fix RHSA-2024:0950?
To fix RHSA-2024:0950, update your PostgreSQL and related packages to the specified fixed versions provided in the advisory.
3
What are the affected versions for RHSA-2024:0950?
Affected versions include specific releases of PostgreSQL up to version 15.6-1.module+el9.3.0+21283+b0ea34b6.
4
What packages are impacted by RHSA-2024:0950?
The affected packages include postgresql, pgaudit, and postgres-decoderbufs, among others listed in the advisory.
5
Is RHSA-2024:0950 relevant for all PostgreSQL installations?
RHSA-2024:0950 is relevant for installations of PostgreSQL that match the affected versions and packages specified in the advisory.