RHSA-2024:0973: Important: postgresql:15 security update
Published Feb 26, 2024
·Updated
Important: postgresql:15 security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).<br>Security Fix(es):<br><li> postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
137 affected componentsFixes available
redhat/pgaudit<1.7.0-1.module+el8.9.0+19797+c4ce5969
1.7.0-1.module+el8.9.0+19797+c4ce5969
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
redhat/postgresql<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/pgaudit<1.7.0-1.module+el8.9.0+19797+c4ce5969
1.7.0-1.module+el8.9.0+19797+c4ce5969
redhat/pgaudit-debuginfo<1.7.0-1.module+el8.9.0+19797+c4ce5969
1.7.0-1.module+el8.9.0+19797+c4ce5969
redhat/pgaudit-debugsource<1.7.0-1.module+el8.9.0+19797+c4ce5969
1.7.0-1.module+el8.9.0+19797+c4ce5969
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
redhat/postgresql<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-contrib<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-contrib-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-debugsource<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-docs<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-docs-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plperl<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plperl-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plpython3<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-pltcl<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-private-devel<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-private-libs<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server-devel<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-static<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-test<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-test-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-test-rpm-macros<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade-devel<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/pgaudit-debuginfo<1.7.0-1.module+el8.9.0+19797+c4ce5969
1.7.0-1.module+el8.9.0+19797+c4ce5969
redhat/pgaudit-debugsource<1.7.0-1.module+el8.9.0+19797+c4ce5969
1.7.0-1.module+el8.9.0+19797+c4ce5969
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
redhat/postgresql-contrib<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-contrib-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-debugsource<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-docs<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-docs-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plperl<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plperl-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plpython3<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-pltcl<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-private-devel<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-private-libs<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server-devel<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-static<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-test<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-test-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade-devel<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/pgaudit<1.7.0-1.module+el8.9.0+19797+c4ce5969
1.7.0-1.module+el8.9.0+19797+c4ce5969
redhat/pgaudit-debuginfo<1.7.0-1.module+el8.9.0+19797+c4ce5969
1.7.0-1.module+el8.9.0+19797+c4ce5969
redhat/pgaudit-debugsource<1.7.0-1.module+el8.9.0+19797+c4ce5969
1.7.0-1.module+el8.9.0+19797+c4ce5969
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969
redhat/postgresql<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-contrib<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-contrib-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-debugsource<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-docs<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-docs-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plperl<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plperl-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plpython3<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-pltcl<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-private-devel<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-private-libs<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server-devel<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-static<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-test<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-test-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade-devel<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6
15.6-1.module+el8.9.0+21287+d0eecfe6
redhat/pgaudit<1.7.0-1.module+el8.9.0+19797+c4ce5969.aa
1.7.0-1.module+el8.9.0+19797+c4ce5969.aa
redhat/pgaudit-debuginfo<1.7.0-1.module+el8.9.0+19797+c4ce5969.aa
1.7.0-1.module+el8.9.0+19797+c4ce5969.aa
redhat/pgaudit-debugsource<1.7.0-1.module+el8.9.0+19797+c4ce5969.aa
1.7.0-1.module+el8.9.0+19797+c4ce5969.aa
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.aa
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.aa
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.aa
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.aa
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.aa
1.9.7-1.Final.module+el8.9.0+19797+c4ce5969.aa
redhat/postgresql<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-contrib<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-contrib-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-debugsource<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-docs<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-docs-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-plperl<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-plperl-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-plpython3<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-pltcl<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-private-devel<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-private-libs<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-server<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-server-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-server-devel<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-static<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-test<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-test-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-upgrade<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-upgrade-devel<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el8.9.0+21287+d0eecfe6.aa
15.6-1.module+el8.9.0+21287+d0eecfe6.aa
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux for IBM z Systems
Remediation
Event History
Feb 26, 2024
Advisory Published
via Red Hat·01:51 AM
Mar 5, 2024
Advisory Published
via Red Hat·02:33 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:0973?
The severity of RHSA-2024:0973 is classified as important.
2
How do I fix RHSA-2024:0973?
To fix RHSA-2024:0973, you need to update the affected PostgreSQL packages to the latest versions listed in the advisory.
3
What components are affected by RHSA-2024:0973?
Components affected by RHSA-2024:0973 include PostgreSQL 15.6, pgaudit 1.7.0, and postgres-decoderbufs 1.9.7.
4
What does the vulnerability RHSA-2024:0973 address?
RHSA-2024:0973 addresses a vulnerability where a non-owner can execute arbitrary SQL with 'REFRESH MATERIALIZED VIEW CONCURRENTLY'.
5
What is CVE-2024-0985 in relation to RHSA-2024:0973?
CVE-2024-0985 is the identifier for the vulnerability fixed in the RHSA-2024:0973 advisory.