Headline

RHSA-2022:4855: Red Hat Security Advisory: postgresql:13 security update

An update for the postgresql:13 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-1552: postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #mac #linux #red_hat #perl #ibm #postgres #sap

Synopsis

Important: postgresql:13 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the postgresql:13 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (13.7).

Security Fix(es):

postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox (CVE-2022-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

If the postgresql service is running, it will be automatically restarted after installing this update.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2081126 - CVE-2022-1552 postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

Red Hat Enterprise Linux for x86_64 8

SRPM

pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.src.rpm

SHA-256: cf5bb68a93506815947a641a4bae89bc8fc115702e717c450fc3e37a54ad3976

pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.src.rpm

SHA-256: 69d37c6427f18ed1bd6d29cb2f54e083fb125c162fcb59a687c67528a2fb08e9

postgres-decoderbufs-0.10.0-2.module+el8.4.0+8873+b821c30a.src.rpm

SHA-256: 1afa4d664011737a91d8efe7f3ba1f1f9bd6c8e7c510d867bbd1ff41832fe95a

postgresql-13.7-2.module+el8.6.0+15347+b8eabcef.src.rpm

SHA-256: 60ce031b003a3db036bfc1a15190d111f48f84618424c7e295ddb8ff09cfa0c8

x86_64

postgresql-test-rpm-macros-13.7-2.module+el8.6.0+15347+b8eabcef.noarch.rpm

SHA-256: 2c05c4fd9769159ad01d65de8705d15df7ff21784457df9e5fb70becb41a0787

pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.x86_64.rpm

SHA-256: ca85a22006bcc34f5c248b316e7cd4f4e85dd9b567d2c981f74d379062c844b4

pg_repack-debuginfo-1.4.6-3.module+el8.5.0+11357+bcc62552.x86_64.rpm

SHA-256: 557512e3ee00e5a6d5ff46d4443efd853f36d6030c9ed8776c0915d29d081f60

pg_repack-debugsource-1.4.6-3.module+el8.5.0+11357+bcc62552.x86_64.rpm

SHA-256: ab85bdfa7d6d9b2e50f316880881239ce99e0915979a65b144349b95b844fa6b

pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64.rpm

SHA-256: 0ee2cdf7b40988a40a70294764149d58ef44f12b69ac85752465444a5b011340

pgaudit-debuginfo-1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64.rpm

SHA-256: ed444ce541962f85a37cae58466a203788f69a184d7dbeec159d7b424ab0ff8c

pgaudit-debugsource-1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64.rpm

SHA-256: 3092f6f3bd32f8b30489fed2aad9d9884f77da6872a53d6b183a49b0224e7d91

postgres-decoderbufs-0.10.0-2.module+el8.4.0+8873+b821c30a.x86_64.rpm

SHA-256: c2d5f6f1d41fd29098090d75b4927696fc01450d42ae75311c14056e574645c0

postgres-decoderbufs-debuginfo-0.10.0-2.module+el8.4.0+8873+b821c30a.x86_64.rpm

SHA-256: 7275a1229edefdcf0df138ea35e317fb9143461c6122cb4c8a3ec2821f5e1b65

postgres-decoderbufs-debugsource-0.10.0-2.module+el8.4.0+8873+b821c30a.x86_64.rpm

SHA-256: c7145f0c47def50c037cd2694d408fa03627e7581a1303e8d7ccfb5cf47918e6

postgresql-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 65410732b0e47166ac772e643f2757e499968aa5eb1c1fd22c05af232f3b7513

postgresql-contrib-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: b15ad938b6174eca43199704666125fcf253a64d3f029a30927b65bf997fb8cb

postgresql-contrib-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 656fee622375a2c8d4e1251b5ce9a3b5523f8655f28df39504175de4f1ab894e

postgresql-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: f71f96fa475ba6b5cbe524480d598b6bff188ac1387dadeacf13fbaec15a5fbe

postgresql-debugsource-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 6673733de6a7b25bb2eb7fc9f9e99e0cc780d52a841a81bfb5ab65b8883b820b

postgresql-docs-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: af95ed9cb4b56198797118b3c7c1420e0d6e93f26bd87cdef998af814192d088

postgresql-docs-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 814af5080f720c9404b5b01dc35854cf7f8021bf580d9449e91868ec69b7a344

postgresql-plperl-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 84c671de7874eaa6815d100283f7e52f4746d2bbac76e14c4973dccf02ff054d

postgresql-plperl-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: bd8045d5674d4079498b282e9c6b7f90d083d6395f13c2dc6e97193ea9162719

postgresql-plpython3-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 03e51a38ff4c3420fe898c34ff4f42f7db8beccf1762e0cdac7bc766217500fa

postgresql-plpython3-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: ebe7e7086a31fe8111dc03789230b22f34b2823c8344d20da896d738ade89fab

postgresql-pltcl-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 94af6a1e689f0c5fc00f3fe84082e0bf2897931f18dabd60d18e11e07a0ee431

postgresql-pltcl-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: efe00a70c6fe0d63446d0a5ebeb18f5206e674dca251e7621798c5f0c4693d27

postgresql-server-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 3e2ccb2401a6dfa1f9bd1fed2766c980daceb0c612d132ada021e30ea1d098a6

postgresql-server-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: f8db9f8d3839631575e2b0fb93bc71fc72513a7b24361bc74cf2e4375f09f365

postgresql-server-devel-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 0424cb14df8c1fad123fcacf062980208e6a66725308e8b0c3c7773d1be1b7d6

postgresql-server-devel-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 1cfd67e9bd62ae5e83291d9ba7df5a6d5f375d2c529ce482558dd35f1f6c9ab1

postgresql-static-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: b7aa5aa817369b488c57da8a5cb17acbca989d104890020848445556a4be3400

postgresql-test-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: a8f43d0ce6cc213fc8de4e5d299948a63bbdaf13c80a857271cc1886cf9bd269

postgresql-test-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: de55f4699ae4691baf345817ab1fda84f71bbd1ca75a81976cdf64a1fb427416

postgresql-upgrade-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: def9ebf94fcb0d8d4f54bb91cd4208c4b0d0f579a6903b6a28be65deed6ad9fa

postgresql-upgrade-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 4bf4bda41a04b9df47be2a7d70c928d8ad3cb745fc48ff9da5321c618e95aaaf

postgresql-upgrade-devel-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: 51f98f0fd69bcbec1065ce62349b4b3e69e3999fc2b0730cc65340933c330002

postgresql-upgrade-devel-debuginfo-13.7-2.module+el8.6.0+15347+b8eabcef.x86_64.rpm

SHA-256: d237dee2f0c2bab84be74a5f6846099b86b58e4eebab07201184233a38bfcb41

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6