RHSA-2024:0951: Important: postgresql security update
Published Feb 22, 2024
·Updated
Important: postgresql security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).Security Fix(es): postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
114 affected componentsFixes available
redhat/postgresql<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-contrib<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-contrib-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-debugsource<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-docs-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plperl<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plperl-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plpython3<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plpython3-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-pltcl<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-pltcl-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-private-libs<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-private-libs-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server-devel-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-test-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-contrib<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-contrib-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-debugsource<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-docs-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plperl<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plperl-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plpython3<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plpython3-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-pltcl<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-pltcl-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-private-libs<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-private-libs-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server-devel-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-test-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-contrib<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-contrib-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-debugsource<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-docs-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plperl<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plperl-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plpython3<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-plpython3-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-pltcl<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-pltcl-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-private-libs<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-private-libs-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server-devel-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-test-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-contrib<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-contrib-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-debugsource<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-docs-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-plperl<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-plperl-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-plpython3<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-plpython3-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-pltcl<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-pltcl-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-private-libs<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-private-libs-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-server<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-server-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-server-devel-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-test-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-upgrade<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-upgrade-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-docs<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-private-devel<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server-devel<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-static<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-test<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade-devel<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-docs<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-private-devel<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server-devel<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-static<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-test<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade-devel<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-docs<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-private-devel<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-server-devel<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-static<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-test<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-upgrade-devel<13.14-1.el9_3.aa
13.14-1.el9_3.aa
redhat/postgresql-docs<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-private-devel<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-server-devel<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-static<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-test<13.14-1.el9_3
13.14-1.el9_3
redhat/postgresql-upgrade-devel<13.14-1.el9_3
13.14-1.el9_3
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat CodeReady Linux Builder for ARM 64
Red Hat Red Hat CodeReady Linux Builder for Power, little endian
Remediation
Event History
Feb 22, 2024
Advisory Published
via Red Hat·12:00 AM
Advisory Published
via Red Hat·04:09 PM
Frequently Asked Questions
1
What is the vulnerability described in RHSA-2024:0951?
The vulnerability in RHSA-2024:0951 allows non-owners to execute arbitrary SQL through the 'REFRESH MATERIALIZED VIEW CONCURRENTLY' command in PostgreSQL.
2
What is the severity level of RHSA-2024:0951?
The severity level of RHSA-2024:0951 is classified as important, indicating a significant risk to systems using PostgreSQL.
3
How do I fix the vulnerability in RHSA-2024:0951?
To fix the vulnerability in RHSA-2024:0951, update PostgreSQL to version 13.14-1.el9_3 or later.
4
Which Red Hat products are affected by RHSA-2024:0951?
RHSA-2024:0951 affects various Red Hat Enterprise Linux versions including x86_64, IBM z Systems, ARM 64, and Power, little endian.
5
What is the CVE associated with the RHSA-2024:0951 vulnerability?
The CVE associated with RHSA-2024:0951 is CVE-2024-0985.