RHSA-2024:1017: Important: postgresql:15 security update
Published Feb 28, 2024
·Updated
Important: postgresql:15 security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).Security Fix(es): postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
140 affected componentsFixes available
redhat/pgaudit<1.7.0-1.module+el8.8.0+17071+aaaceaa4
1.7.0-1.module+el8.8.0+17071+aaaceaa4
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
redhat/postgresql<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-test-rpm-macros<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/pgaudit<1.7.0-1.module+el8.8.0+17071+aaaceaa4
1.7.0-1.module+el8.8.0+17071+aaaceaa4
redhat/pgaudit-debuginfo<1.7.0-1.module+el8.8.0+17071+aaaceaa4
1.7.0-1.module+el8.8.0+17071+aaaceaa4
redhat/pgaudit-debugsource<1.7.0-1.module+el8.8.0+17071+aaaceaa4
1.7.0-1.module+el8.8.0+17071+aaaceaa4
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
redhat/postgresql<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-contrib<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-contrib-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-debugsource<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-docs<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-docs-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plperl<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plperl-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plpython3<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-pltcl<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-private-devel<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-private-libs<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server-devel<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-static<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-test<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-test-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade-devel<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/pgaudit-debuginfo<1.7.0-1.module+el8.8.0+17071+aaaceaa4
1.7.0-1.module+el8.8.0+17071+aaaceaa4
redhat/pgaudit-debugsource<1.7.0-1.module+el8.8.0+17071+aaaceaa4
1.7.0-1.module+el8.8.0+17071+aaaceaa4
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
redhat/postgresql-contrib<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-contrib-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-debugsource<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-docs<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-docs-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plperl<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plperl-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plpython3<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-pltcl<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-private-devel<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-private-libs<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server-devel<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-static<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-test<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-test-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade-devel<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/pgaudit<1.7.0-1.module+el8.8.0+17071+aaaceaa4
1.7.0-1.module+el8.8.0+17071+aaaceaa4
redhat/pgaudit-debuginfo<1.7.0-1.module+el8.8.0+17071+aaaceaa4
1.7.0-1.module+el8.8.0+17071+aaaceaa4
redhat/pgaudit-debugsource<1.7.0-1.module+el8.8.0+17071+aaaceaa4
1.7.0-1.module+el8.8.0+17071+aaaceaa4
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4
redhat/postgresql<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-contrib<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-contrib-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-debugsource<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-docs<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-docs-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plperl<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plperl-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plpython3<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-pltcl<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-private-devel<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-private-libs<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server-devel<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-static<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-test<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-test-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade-devel<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97
15.6-1.module+el8.8.0+21343+fedbca97
redhat/pgaudit<1.7.0-1.module+el8.8.0+17071+aaaceaa4.aa
1.7.0-1.module+el8.8.0+17071+aaaceaa4.aa
redhat/pgaudit-debuginfo<1.7.0-1.module+el8.8.0+17071+aaaceaa4.aa
1.7.0-1.module+el8.8.0+17071+aaaceaa4.aa
redhat/pgaudit-debugsource<1.7.0-1.module+el8.8.0+17071+aaaceaa4.aa
1.7.0-1.module+el8.8.0+17071+aaaceaa4.aa
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4.aa
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4.aa
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4.aa
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4.aa
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4.aa
1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4.aa
redhat/postgresql<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-contrib<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-contrib-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-debugsource<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-docs<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-docs-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-plperl<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-plperl-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-plpython3<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-pltcl<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-private-devel<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-private-libs<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-server<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-server-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-server-devel<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-static<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-test<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-test-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-upgrade<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-upgrade-devel<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el8.8.0+21343+fedbca97.aa
15.6-1.module+el8.8.0+21343+fedbca97.aa
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Remediation
Event History
Feb 28, 2024
Advisory Published
via Red Hat·11:33 AM
Mar 15, 2024
Advisory Published
via Red Hat·12:40 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1017?
The severity of RHSA-2024:1017 is classified as Important.
2
How do I fix RHSA-2024:1017?
To fix RHSA-2024:1017, update your PostgreSQL packages to the versions specified in the advisory.
3
What vulnerability is addressed in RHSA-2024:1017?
RHSA-2024:1017 addresses CVE-2024-0985, which allows non-owners to execute arbitrary SQL with 'REFRESH MATERIALIZED VIEW CONCURRENTLY'.
4
Which systems are affected by RHSA-2024:1017?
Affected systems include various versions of Red Hat Enterprise Linux and PostgreSQL packages.
5
What packages need to be updated for RHSA-2024:1017?
You need to update PostgreSQL and related packages to their latest available versions as indicated in the advisory.