RHSA-2024:6145: Important: postgresql security update
Published Sep 3, 2024
·Updated
Important: postgresql security update
Other sources
PostgreSQL is an advanced object-relational database management system (DBMS).Security Fix(es): postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL (CVE-2024-7348) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
121 affected componentsFixes available
redhat/postgresql<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-contrib<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-contrib-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-debugsource<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-docs-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plperl<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plperl-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plpython3<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plpython3-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-pltcl<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-pltcl-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-private-libs<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-private-libs-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server-devel-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-test-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade-devel-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-contrib<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-contrib-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-debugsource<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-docs-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plperl<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plperl-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plpython3<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plpython3-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-pltcl<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-pltcl-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-private-libs<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-private-libs-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server-devel-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-test-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade-devel-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-contrib<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-contrib-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-debugsource<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-docs-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plperl<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plperl-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plpython3<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-plpython3-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-pltcl<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-pltcl-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-private-libs<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-private-libs-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server-devel-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-test-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade-devel-debuginfo<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-contrib<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-contrib-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-debugsource<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-docs-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-plperl<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-plperl-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-plpython3<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-plpython3-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-pltcl<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-pltcl-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-private-libs<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-private-libs-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-server<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-server-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-server-devel-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-test-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-upgrade<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-upgrade-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-upgrade-devel-debuginfo<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-docs<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-private-devel<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server-devel<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-static<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-test<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade-devel<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-docs<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-private-devel<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server-devel<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-static<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-test<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade-devel<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-docs<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-private-devel<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-server-devel<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-static<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-test<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-upgrade-devel<13.16-1.el9_2
13.16-1.el9_2
redhat/postgresql-docs<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-private-devel<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-server-devel<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-static<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-test<13.16-1.el9_2.aa
13.16-1.el9_2.aa
redhat/postgresql-upgrade-devel<13.16-1.el9_2.aa
13.16-1.el9_2.aa
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Remediation
Event History
Sep 3, 2024
Advisory Published
via Red Hat·12:00 AM
Advisory Published
via Red Hat·01:09 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:6145?
The severity of RHSA-2024:6145 is classified as Important.
2
How do I fix RHSA-2024:6145?
To fix RHSA-2024:6145, update to the remedied package versions which is 13.16-1.el9_2.
3
What is the vulnerability associated with RHSA-2024:6145?
RHSA-2024:6145 addresses a vulnerability where PostgreSQL relation replacement during pg_dump can execute arbitrary SQL, identified as CVE-2024-7348.
4
Which systems are affected by RHSA-2024:6145?
RHSA-2024:6145 affects various Red Hat Enterprise Linux products and versions, particularly those running PostgreSQL.
5
What packages are included in the RHSA-2024:6145 update?
The RHSA-2024:6145 update includes multiple PostgreSQL packages such as postgresql, postgresql-server, and postgresql-contrib at version 13.16-1.el9_2.