RHSA-2024:1314: Important: postgresql:15 security update
Published Mar 13, 2024
·Updated
Important: postgresql:15 security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).Security Fix(es): postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
142 affected componentsFixes available
redhat/pgaudit<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgresql<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-test-rpm-macros<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/pgaudit<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/pgaudit-debuginfo<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/pgaudit-debugsource<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgresql<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-contrib<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-contrib-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-debugsource<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-docs<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-docs-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plperl<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plperl-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plpython3<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-pltcl<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-private-devel<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-private-libs<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server-devel<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-static<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-test<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-test-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade-devel<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/pgaudit-debuginfo<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/pgaudit-debugsource<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgresql-contrib<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-contrib-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-debugsource<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-docs<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-docs-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plperl<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plperl-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plpython3<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-pltcl<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-private-devel<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-private-libs<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server-devel<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-static<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-test<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-test-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade-devel<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/pgaudit<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/pgaudit-debuginfo<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/pgaudit-debugsource<1.7.0-1.module+el9.2.0+17405+aeb9ec60
1.7.0-1.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60
redhat/postgresql<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-contrib<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-contrib-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-debugsource<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-docs<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-docs-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plperl<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plperl-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plpython3<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-pltcl<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-private-devel<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-private-libs<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server-devel<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-static<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-test<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-test-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade-devel<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d
15.6-1.module+el9.2.0+21314+f2361d6d
redhat/pgaudit<1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
redhat/pgaudit-debuginfo<1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
redhat/pgaudit-debugsource<1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
1.7.0-1.module+el9.2.0+17405+aeb9ec60.aa
redhat/postgres-decoderbufs<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
redhat/postgres-decoderbufs-debuginfo<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
redhat/postgres-decoderbufs-debugsource<1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60.aa
redhat/postgresql<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-contrib<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-contrib-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-debugsource<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-docs<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-docs-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-plperl<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-plperl-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-plpython3<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-plpython3-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-pltcl<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-pltcl-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-private-devel<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-private-libs<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-private-libs-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-server<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-server-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-server-devel<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-server-devel-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-static<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-test<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-test-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-upgrade<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-upgrade-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-upgrade-devel<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
redhat/postgresql-upgrade-devel-debuginfo<15.6-1.module+el9.2.0+21314+f2361d6d.aa
15.6-1.module+el9.2.0+21314+f2361d6d.aa
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Remediation
Event History
Mar 13, 2024
Advisory Published
via Red Hat·12:00 AM
Advisory Published
via Red Hat·01:29 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1314?
The severity of RHSA-2024:1314 is categorized as Important.
2
How do I fix RHSA-2024:1314?
To fix RHSA-2024:1314, update your PostgreSQL packages to version 15.6-1.module+el9.2.0+21314+f2361d6d or later.
3
What vulnerability does RHSA-2024:1314 address?
RHSA-2024:1314 addresses CVE-2024-0985, which allows non-owner usage of 'REFRESH MATERIALIZED VIEW CONCURRENTLY' to execute arbitrary SQL.
4
Which systems are affected by RHSA-2024:1314?
Affected systems include various versions of Red Hat Enterprise Linux, specifically those running PostgreSQL.
5
When was RHSA-2024:1314 published?
RHSA-2024:1314 was published in early 2024.