RHSA-2024:1348: Important: postgresql:10 security update
Published Mar 18, 2024
·Updated
Important: postgresql:10 security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).Security Fix(es): postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
108 affected componentsFixes available
redhat/postgresql<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-contrib<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-contrib-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-debugsource<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-docs<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-docs-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plperl<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plperl-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plpython3<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plpython3-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-pltcl<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-pltcl-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server-devel<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server-devel-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-static<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-test<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-test-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-test-rpm-macros<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade-devel<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade-devel-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-contrib<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-contrib-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-debugsource<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-docs<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-docs-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plperl<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plperl-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plpython3<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plpython3-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-pltcl<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-pltcl-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server-devel<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server-devel-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-static<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-test<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-test-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-test-rpm-macros<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade-devel<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade-devel-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-contrib<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-contrib-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-debugsource<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-docs<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-docs-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plperl<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plperl-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plpython3<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-plpython3-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-pltcl<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-pltcl-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server-devel<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-server-devel-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-static<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-test<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-test-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-test-rpm-macros<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade-devel<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql-upgrade-devel-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c
10.21-4.module+el8.6.0+21345+167dd12c
redhat/postgresql<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-contrib<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-contrib-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-debugsource<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-docs<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-docs-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-plperl<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-plperl-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-plpython3<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-plpython3-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-pltcl<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-pltcl-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-server<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-server-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-server-devel<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-server-devel-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-static<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-test<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-test-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-test-rpm-macros<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-upgrade<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-upgrade-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-upgrade-devel<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
redhat/postgresql-upgrade-devel-debuginfo<10.21-4.module+el8.6.0+21345+167dd12c.aa
10.21-4.module+el8.6.0+21345+167dd12c.aa
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Remediation
Event History
Mar 18, 2024
Advisory Published
via Red Hat·12:57 AM
Feb 9, 2025
Advisory Published
via Red Hat·02:31 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1348?
The severity of RHSA-2024:1348 is categorized as important.
2
How do I fix RHSA-2024:1348?
To fix RHSA-2024:1348, update to postgresql version 10.21-4.module+el8.6.0+21345+167dd12c.
3
What vulnerability is associated with RHSA-2024:1348?
RHSA-2024:1348 addresses a vulnerability where non-owner users can execute arbitrary SQL using the 'REFRESH MATERIALIZED VIEW CONCURRENTLY' command.
4
Which systems are affected by RHSA-2024:1348?
RHSA-2024:1348 affects multiple versions of Red Hat Enterprise Linux and related products that utilize PostgreSQL.
5
How can I verify if I'm impacted by RHSA-2024:1348?
You can verify if you are impacted by RHSA-2024:1348 by checking your PostgreSQL version and the specific configurations in use.