RHSA-2024:1426: Important: postgresql security update
Published Mar 19, 2024
·Updated
Important: postgresql security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).Security Fix(es): postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
128 affected componentsFixes available
redhat/pgaudit<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgresql<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-test-rpm-macros<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/pgaudit<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/pgaudit-debugsource<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgresql<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-contrib<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-debugsource<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-docs<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plperl<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plpython3<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-pltcl<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server-devel<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-static<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-test<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-test-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade-devel<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/pgaudit-debugsource<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgresql-contrib<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-debugsource<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-docs<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plperl<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plpython3<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-pltcl<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server-devel<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-static<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-test<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-test-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade-devel<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/pgaudit<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/pgaudit-debugsource<1.5.0-1.module+el8.4.0+8873+b821c30a
1.5.0-1.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.4.0+8873+b821c30a
0.10.0-2.module+el8.4.0+8873+b821c30a
redhat/postgresql<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-contrib<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-debugsource<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-docs<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plperl<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plpython3<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-pltcl<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server-devel<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-static<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-test<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-test-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade-devel<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3
13.14-1.module+el8.8.0+21349+23e355c3
redhat/pgaudit<1.5.0-1.module+el8.4.0+8873+b821c30a.aa
1.5.0-1.module+el8.4.0+8873+b821c30a.aa
redhat/pgaudit-debuginfo<1.5.0-1.module+el8.4.0+8873+b821c30a.aa
1.5.0-1.module+el8.4.0+8873+b821c30a.aa
redhat/pgaudit-debugsource<1.5.0-1.module+el8.4.0+8873+b821c30a.aa
1.5.0-1.module+el8.4.0+8873+b821c30a.aa
redhat/postgres-decoderbufs<0.10.0-2.module+el8.4.0+8873+b821c30a.aa
0.10.0-2.module+el8.4.0+8873+b821c30a.aa
redhat/postgres-decoderbufs-debuginfo<0.10.0-2.module+el8.4.0+8873+b821c30a.aa
0.10.0-2.module+el8.4.0+8873+b821c30a.aa
redhat/postgres-decoderbufs-debugsource<0.10.0-2.module+el8.4.0+8873+b821c30a.aa
0.10.0-2.module+el8.4.0+8873+b821c30a.aa
redhat/postgresql<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-contrib<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-contrib-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-debugsource<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-docs<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-docs-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-plperl<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-plperl-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-plpython3<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-plpython3-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-pltcl<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-pltcl-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-server<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-server-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-server-devel<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-server-devel-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-static<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-test<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-test-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-upgrade<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-upgrade-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-upgrade-devel<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
redhat/postgresql-upgrade-devel-debuginfo<13.14-1.module+el8.8.0+21349+23e355c3.aa
13.14-1.module+el8.8.0+21349+23e355c3.aa
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Remediation
Event History
Mar 19, 2024
Advisory Published
via Red Hat·05:42 PM
Mar 27, 2024
Advisory Published
via Red Hat·06:02 PM
Frequently Asked Questions
1
What is the severity of RHSA-2024:1426?
The severity of RHSA-2024:1426 is categorized as Important.
2
How do I fix RHSA-2024:1426?
To fix RHSA-2024:1426, it is recommended to update affected packages to the latest available versions listed in the advisory.
3
What vulnerability does RHSA-2024:1426 address?
RHSA-2024:1426 addresses a vulnerability where a non-owner can execute arbitrary SQL using 'REFRESH MATERIALIZED VIEW CONCURRENTLY' (CVE-2024-0985).
4
What packages are affected by RHSA-2024:1426?
Affected packages include postgresql, pgaudit, and postgres-decoderbufs among others for Red Hat Enterprise Linux 8.
5
Is an update mandatory for all environments with RHSA-2024:1426?
It is strongly recommended to apply the update for all environments to mitigate the risk associated with the vulnerability.