RHSA-2024:1195: Important: postgresql:12 security update
Published Mar 6, 2024
·Updated
Important: postgresql:12 security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).Security Fix(es): postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
68 affected componentsFixes available
redhat/pgaudit<1.4.0-6.module+el8.4.0+11288+c193d6d7
1.4.0-6.module+el8.4.0+11288+c193d6d7
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+11288+c193d6d7
0.10.0-2.module+el8.4.0+11288+c193d6d7
redhat/postgresql<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-test-rpm-macros<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/pgaudit<1.4.0-6.module+el8.4.0+11288+c193d6d7
1.4.0-6.module+el8.4.0+11288+c193d6d7
redhat/pgaudit-debuginfo<1.4.0-6.module+el8.4.0+11288+c193d6d7
1.4.0-6.module+el8.4.0+11288+c193d6d7
redhat/pgaudit-debugsource<1.4.0-6.module+el8.4.0+11288+c193d6d7
1.4.0-6.module+el8.4.0+11288+c193d6d7
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+11288+c193d6d7
0.10.0-2.module+el8.4.0+11288+c193d6d7
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.4.0+11288+c193d6d7
0.10.0-2.module+el8.4.0+11288+c193d6d7
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.4.0+11288+c193d6d7
0.10.0-2.module+el8.4.0+11288+c193d6d7
redhat/postgresql<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-contrib<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-contrib-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-debugsource<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-docs<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-docs-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-plperl<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-plperl-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-plpython3<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-plpython3-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-pltcl<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-pltcl-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-server<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-server-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-server-devel<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-server-devel-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-static<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-test<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-test-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-upgrade<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-upgrade-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-upgrade-devel<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-upgrade-devel-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/pgaudit<1.4.0-6.module+el8.4.0+11288+c193d6d7
1.4.0-6.module+el8.4.0+11288+c193d6d7
redhat/pgaudit-debuginfo<1.4.0-6.module+el8.4.0+11288+c193d6d7
1.4.0-6.module+el8.4.0+11288+c193d6d7
redhat/pgaudit-debugsource<1.4.0-6.module+el8.4.0+11288+c193d6d7
1.4.0-6.module+el8.4.0+11288+c193d6d7
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+11288+c193d6d7
0.10.0-2.module+el8.4.0+11288+c193d6d7
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.4.0+11288+c193d6d7
0.10.0-2.module+el8.4.0+11288+c193d6d7
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.4.0+11288+c193d6d7
0.10.0-2.module+el8.4.0+11288+c193d6d7
redhat/postgresql<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-contrib<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-contrib-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-debugsource<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-docs<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-docs-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-plperl<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-plperl-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-plpython3<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-plpython3-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-pltcl<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-pltcl-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-server<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-server-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-server-devel<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-server-devel-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-static<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-test<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-test-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-upgrade<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-upgrade-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-upgrade-devel<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
redhat/postgresql-upgrade-devel-debuginfo<12.18-1.module+el8.4.0+21322+132bf396
12.18-1.module+el8.4.0+21322+132bf396
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - AUS
Remediation
Event History
Mar 6, 2024
Advisory Published
via Red Hat·04:25 PM
Apr 7, 2024
Advisory Published
via Red Hat·05:13 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1195?
The severity of RHSA-2024:1195 is classified as important.
2
What vulnerability is addressed in RHSA-2024:1195?
RHSA-2024:1195 addresses a vulnerability allowing non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' to execute arbitrary SQL, identified as CVE-2024-0985.
3
How do I fix RHSA-2024:1195?
To fix RHSA-2024:1195, update your PostgreSQL packages to the versions specified in the advisory.
4
What software is affected by RHSA-2024:1195?
RHSA-2024:1195 affects various versions of PostgreSQL and its related packages for Red Hat Enterprise Linux.
5
Is a reboot required after applying the fix for RHSA-2024:1195?
A reboot is not typically required after applying the fix for RHSA-2024:1195, but you should restart the PostgreSQL service.