RHSA-2024:0975: Important: postgresql:13 security update
Published Feb 26, 2024
·Updated
Important: postgresql:13 security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).<br>Security Fix(es):<br><li> postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
125 affected componentsFixes available
redhat/pgaudit<1.5.0-1.module+el8.9.0+20664+9c30cf7f
1.5.0-1.module+el8.9.0+20664+9c30cf7f
redhat/postgres-decoderbufs<0.10.0-2.module+el8.9.0+20664+9c30cf7f
0.10.0-2.module+el8.9.0+20664+9c30cf7f
redhat/postgresql<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-test-rpm-macros<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/pgaudit<1.5.0-1.module+el8.9.0+20664+9c30cf7f
1.5.0-1.module+el8.9.0+20664+9c30cf7f
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.9.0+20664+9c30cf7f
1.5.0-1.module+el8.9.0+20664+9c30cf7f
redhat/pgaudit-debugsource<1.5.0-1.module+el8.9.0+20664+9c30cf7f
1.5.0-1.module+el8.9.0+20664+9c30cf7f
redhat/postgres-decoderbufs<0.10.0-2.module+el8.9.0+20664+9c30cf7f
0.10.0-2.module+el8.9.0+20664+9c30cf7f
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.9.0+20664+9c30cf7f
0.10.0-2.module+el8.9.0+20664+9c30cf7f
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.9.0+20664+9c30cf7f
0.10.0-2.module+el8.9.0+20664+9c30cf7f
redhat/postgresql<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-contrib<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-debugsource<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-docs<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plperl<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plpython3<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-pltcl<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server-devel<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-static<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-test<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-test-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade-devel<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.9.0+20664+9c30cf7f
1.5.0-1.module+el8.9.0+20664+9c30cf7f
redhat/pgaudit-debugsource<1.5.0-1.module+el8.9.0+20664+9c30cf7f
1.5.0-1.module+el8.9.0+20664+9c30cf7f
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.9.0+20664+9c30cf7f
0.10.0-2.module+el8.9.0+20664+9c30cf7f
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.9.0+20664+9c30cf7f
0.10.0-2.module+el8.9.0+20664+9c30cf7f
redhat/postgresql-contrib<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-debugsource<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-docs<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plperl<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plpython3<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-pltcl<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server-devel<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-static<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-test<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-test-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade-devel<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/pgaudit<1.5.0-1.module+el8.9.0+20664+9c30cf7f
1.5.0-1.module+el8.9.0+20664+9c30cf7f
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.9.0+20664+9c30cf7f
1.5.0-1.module+el8.9.0+20664+9c30cf7f
redhat/pgaudit-debugsource<1.5.0-1.module+el8.9.0+20664+9c30cf7f
1.5.0-1.module+el8.9.0+20664+9c30cf7f
redhat/postgres-decoderbufs<0.10.0-2.module+el8.9.0+20664+9c30cf7f
0.10.0-2.module+el8.9.0+20664+9c30cf7f
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.9.0+20664+9c30cf7f
0.10.0-2.module+el8.9.0+20664+9c30cf7f
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.9.0+20664+9c30cf7f
0.10.0-2.module+el8.9.0+20664+9c30cf7f
redhat/postgresql<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-contrib<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-debugsource<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-docs<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plperl<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plpython3<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-pltcl<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server-devel<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-static<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-test<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-test-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade-devel<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44
13.14-1.module+el8.9.0+21288+3d364c44
redhat/pgaudit<1.5.0-1.module+el8.9.0+20664+9c30cf7f.aa
1.5.0-1.module+el8.9.0+20664+9c30cf7f.aa
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.9.0+20664+9c30cf7f.aa
1.5.0-1.module+el8.9.0+20664+9c30cf7f.aa
redhat/pgaudit-debugsource<1.5.0-1.module+el8.9.0+20664+9c30cf7f.aa
1.5.0-1.module+el8.9.0+20664+9c30cf7f.aa
redhat/postgres-decoderbufs<0.10.0-2.module+el8.9.0+20664+9c30cf7f.aa
0.10.0-2.module+el8.9.0+20664+9c30cf7f.aa
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.9.0+20664+9c30cf7f.aa
0.10.0-2.module+el8.9.0+20664+9c30cf7f.aa
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.9.0+20664+9c30cf7f.aa
0.10.0-2.module+el8.9.0+20664+9c30cf7f.aa
redhat/postgresql<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-contrib<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-debugsource<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-docs<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-plperl<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-plpython3<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-pltcl<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-server<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-server-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-server-devel<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-static<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-test<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-test-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-upgrade<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-upgrade-devel<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.9.0+21288+3d364c44.aa
13.14-1.module+el8.9.0+21288+3d364c44.aa
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux for IBM z Systems
Remediation
Event History
Feb 26, 2024
Advisory Published
via Red Hat·03:12 AM
Mar 1, 2024
Advisory Published
via Red Hat·03:33 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:0975?
The severity of RHSA-2024:0975 is classified as important.
2
How do I fix RHSA-2024:0975?
The recommended fix for RHSA-2024:0975 is to update to the specified versions of the affected packages listed in the advisory.
3
What vulnerability does RHSA-2024:0975 address?
RHSA-2024:0975 addresses the vulnerability CVE-2024-0985 which allows non-owners to execute arbitrary SQL via the 'REFRESH MATERIALIZED VIEW CONCURRENTLY' command.
4
Which packages are affected by RHSA-2024:0975?
RHSA-2024:0975 affects multiple packages, including postgresql, pgaudit, and postgresql-decoderbufs among others.
5
Is there a specific version I need to upgrade to for RHSA-2024:0975?
Yes, you need to upgrade to versions such as postgresql 13.14-1.module+el8.9.0+21288+3d364c44 or higher to mitigate the issue.