RHSA-2024:1315: Important: postgresql:13 security update
Published Mar 13, 2024
·Updated
Important: postgresql:13 security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).Security Fix(es): postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
129 affected componentsFixes available
redhat/pgaudit<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgresql<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-test-rpm-macros<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/pgaudit<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/pgaudit-debugsource<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgresql<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-contrib<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-debugsource<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-docs<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plperl<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plpython3<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-pltcl<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server-devel<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-static<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-test<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-test-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade-devel<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/pgaudit-debugsource<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgresql-contrib<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-debugsource<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-docs<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plperl<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plpython3<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-pltcl<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server-devel<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-static<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-test<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-test-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade-devel<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/pgaudit<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/pgaudit-debugsource<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgresql<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-contrib<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-debugsource<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-docs<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plperl<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plpython3<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-pltcl<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server-devel<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-static<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-test<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-test-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade-devel<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375
13.14-1.module+el8.6.0+21339+b88e1375
redhat/pgaudit<1.5.0-1.module+el8.4.0+8873+b821c30a.aa
1.5.0-1.module+el8.4.0+8873+b821c30a.aa
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.4.0+8873+b821c30a.aa
1.5.0-1.module+el8.4.0+8873+b821c30a.aa
redhat/pgaudit-debugsource<1.5.0-1.module+el8.4.0+8873+b821c30a.aa
1.5.0-1.module+el8.4.0+8873+b821c30a.aa
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+8873+b821c30a.aa
0.10.0-2.module+el8.4.0+8873+b821c30a.aa
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.4.0+8873+b821c30a.aa
0.10.0-2.module+el8.4.0+8873+b821c30a.aa
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.4.0+8873+b821c30a.aa
0.10.0-2.module+el8.4.0+8873+b821c30a.aa
redhat/postgresql<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-contrib<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-debugsource<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-docs<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-plperl<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-plpython3<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-pltcl<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-server<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-server-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-server-devel<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-static<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-test<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-test-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-upgrade<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-upgrade-devel<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.6.0+21339+b88e1375.aa
13.14-1.module+el8.6.0+21339+b88e1375.aa
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Remediation
Event History
Mar 13, 2024
Advisory Published
via Red Hat·01:29 PM
Apr 10, 2024
Advisory Published
via Red Hat·02:46 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1315?
The severity of RHSA-2024:1315 is classified as important.
2
How do I fix RHSA-2024:1315?
To fix RHSA-2024:1315, update the affected packages to the specified versions provided in the advisory.
3
Which software is affected by RHSA-2024:1315?
RHSA-2024:1315 affects various versions of PostgreSQL and related packages across multiple Red Hat Enterprise Linux architectures.
4
What types of vulnerabilities does RHSA-2024:1315 address?
RHSA-2024:1315 addresses security vulnerabilities in PostgreSQL 13.
5
When was RHSA-2024:1315 released?
RHSA-2024:1315 was released on March 10, 2024.