RHSA-2024:0956: Important: postgresql:10 security update
Published Feb 26, 2024
·Updated
Important: postgresql:10 security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).Security Fix(es): postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
104 affected componentsFixes available
redhat/postgresql<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-contrib<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-contrib-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-debugsource<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-docs<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-docs-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plperl<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plperl-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plpython3<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plpython3-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-pltcl<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-pltcl-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server-devel<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server-devel-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-static<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-test<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-test-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-test-rpm-macros<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade-devel<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade-devel-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-contrib<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-contrib-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-debugsource<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-docs<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-docs-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plperl<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plperl-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plpython3<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plpython3-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-pltcl<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-pltcl-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server-devel<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server-devel-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-static<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-test<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-test-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-test-rpm-macros<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade-devel<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade-devel-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-contrib<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-contrib-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-debugsource<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-docs<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-docs-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plperl<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plperl-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plpython3<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-plpython3-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-pltcl<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-pltcl-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server-devel<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-server-devel-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-static<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-test<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-test-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-test-rpm-macros<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade-devel<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql-upgrade-devel-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a
10.23-4.module+el8.9.0+21317+d2c6bf8a
redhat/postgresql<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-contrib<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-contrib-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-debugsource<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-docs<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-docs-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-plperl<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-plperl-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-plpython3<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-plpython3-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-pltcl<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-pltcl-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-server<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-server-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-server-devel<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-server-devel-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-static<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-test<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-test-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-test-rpm-macros<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-upgrade<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-upgrade-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-upgrade-devel<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
redhat/postgresql-upgrade-devel-debuginfo<10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
10.23-4.module+el8.9.0+21317+d2c6bf8a.aa
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux for IBM z Systems
Remediation
Event History
Feb 26, 2024
Advisory Published
via Red Hat·12:51 AM
Jun 13, 2024
Advisory Published
via Red Hat·01:47 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:0956?
The severity of RHSA-2024:0956 is classified as important.
2
How do I fix RHSA-2024:0956?
To fix RHSA-2024:0956, update to the package versions specified in the advisory, specifically to version 10.23-4.module+el8.9.0+21317+d2c6bf8a.
3
What vulnerability is addressed in RHSA-2024:0956?
RHSA-2024:0956 addresses the vulnerability CVE-2024-0985, which allows non-owners to execute arbitrary SQL using 'REFRESH MATERIALIZED VIEW CONCURRENTLY'.
4
Which software is affected by RHSA-2024:0956?
RHSA-2024:0956 affects PostgreSQL 10 on Red Hat Enterprise Linux for various architectures including x86_64, ARM 64, and Power.
5
Is there a workaround for RHSA-2024:0956?
No specific workaround is provided for RHSA-2024:0956; the recommended action is to apply the updated package.