Headline

RHSA-2022:4854: Red Hat Security Advisory: postgresql:10 security update

An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-1552: postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #mac #linux #red_hat #perl #ibm #postgres #sap

Synopsis

Important: postgresql:10 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (10.21).

Security Fix(es):

postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox (CVE-2022-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

If the postgresql service is running, it will be automatically restarted after installing this update.

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 2081126 - CVE-2022-1552 postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM

postgresql-10.21-2.module+el8.4.0+15341+25c9f2fe.src.rpm

SHA-256: d169f9a1d1602cfdee3f70612c01139dcfc59f0494b597c2d4902cce53b16885

x86_64

postgresql-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: de69a5fe36ea477cca2e6680a3e0e52d1cf1d300e781bd7cb156793ce96a2b7f

postgresql-contrib-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 3fad7b1f93208fa55a2c463df0b230112e0599fec07ac0f5ab0782f1de0c0c80

postgresql-contrib-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 334bd9c2147f9fbbff6117f89b7fc23a9eebd518879333bab63d5e5f53aa2cc3

postgresql-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: c126b177512fcd22f31662e05fa1d2bb61d6a8af5be73ca70455e588ae786a4b

postgresql-debugsource-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: a5effd40da5cb524283c286a1acfd358e9089fb135cf3a5a69d33be93c23613a

postgresql-docs-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 8b14cb75a26d9b8b520e7754d3730580fc6b7e2bcc066a0ec04f7a7c0761f0cc

postgresql-docs-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 2cab9d9012daf2d5d59b6219c91fe5b6a88e5147e01d191a33f95c2c70ab91a1

postgresql-plperl-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: fdc355be88ea0cc5f3e31f665b1b6ac4d931c28427f3879ece91018a0e8ca1f4

postgresql-plperl-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 567b00cb7ccf32320fdbab79eeccc3619362632ba7b633aa9a2597afcc1daf13

postgresql-plpython3-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: a133d1b4977d8b18aa6025dbd2015346ef6163b8ba9cf261552ed4a24c1a05dc

postgresql-plpython3-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: ef6572c4faffdf2858bc7bb09d6901bb610f1549a50185b01bfe35bf5191b00d

postgresql-pltcl-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 7416eb573f3f1f74e949f8a16df51d5befc156603b99deca2eb307113f3c9a13

postgresql-pltcl-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: c4a4942f6fd89906b7637335f7da8f38cb087b9186a53db0b180e171ff23d425

postgresql-server-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: edaa7a1828ba8add18a51c4db321e22d2d13b622a3319701de885dc292ad36e1

postgresql-server-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 2f497db12b087ef0b29641dbf3e004d35cccb71cc63319de625d9613e48ab180

postgresql-server-devel-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: e4821740dbb3f6f851c632c4131d7d43daf32e7140fedd55a249ff6417d7a78a

postgresql-server-devel-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: ffbb446f2ded24751291d05452535bedf3f8072dae0005dfe502cc7cd476e740

postgresql-static-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 35126e1265270fc462db5cb190050a5d722e5c3b22a15073dfd07413654101c9

postgresql-test-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: da4a618b4526b9f3f2c67e6848a587c955b9e176b358a1d404b9bf77912fa4a6

postgresql-test-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: ac2453b5c0e3ef8e4dd95590760bf8ea3503dea713c98046f422fc58d69a3ce7

postgresql-test-rpm-macros-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: a37ade54c21c69241d42e1175e2ecd37b1e7782d75f16ddaa14660d0c2ca4742

postgresql-upgrade-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: df82867974430d8955bdf9dca87a36fd7c8b2bb953fdc8229411a1258fa623fe

postgresql-upgrade-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 6d3d5b46e85570d0bed47f399568c6d69929f25814ff67689b7e4dce960beff8

postgresql-upgrade-devel-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 8c776fab6d6b4c08ee7630ed3eaf2d1d5890beae429c3ecd5898974ef0d52fb9

postgresql-upgrade-devel-debuginfo-10.21-2.module+el8.4.0+15341+25c9f2fe.x86_64.rpm

SHA-256: 22602e4f1f0624c3508e11e1506ab21fdec36d18288071aef2d85cdaafeb08cd

Red Hat Enterprise Linux Server - AUS 8.4