Headline

RHSA-2022:4856: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-1552: postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #mac #linux #red_hat #perl #ibm #postgres #sap

Synopsis

Important: postgresql:12 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (12.11).

Security Fix(es):

postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox (CVE-2022-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

If the postgresql service is running, it will be automatically restarted after installing this update.

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 2081126 - CVE-2022-1552 postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM

pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.src.rpm

SHA-256: b03a38090ec961b4c6fe83ae8e373284f0576a5472251536dfb1d10916b31177

postgres-decoderbufs-0.10.0-2.module+el8.4.0+11288+c193d6d7.src.rpm

SHA-256: 4a6ff774095320178b96a836d62d5db488a36d985f86c0df120df6bdffe444e1

postgresql-12.11-2.module+el8.4.0+15406+aeb4ae67.src.rpm

SHA-256: f8c5a0b7f6ee32d178476d60d95d6ad8e22e3ba12b1548c723a32b6f0020c36f

x86_64

postgresql-test-rpm-macros-12.11-2.module+el8.4.0+15406+aeb4ae67.noarch.rpm

SHA-256: 37dd31236a6830edd388a66ab0f7f15538bc6d495de4e074da8e1c93b3d17efc

pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64.rpm

SHA-256: 0bbd0a783d7399c0a70bace3f71bd9bc706d57cfbd5a92355253eac38ef71d64

pgaudit-debuginfo-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64.rpm

SHA-256: 7ec70c2c12b53aa6aef901acc2c48655d7acc11b45db3a5a8728a4eff214a610

pgaudit-debugsource-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64.rpm

SHA-256: efae4253c28d1d3774ef16406da959ed11d8dd45ba769426433fb7433cadee0c

postgres-decoderbufs-0.10.0-2.module+el8.4.0+11288+c193d6d7.x86_64.rpm

SHA-256: a6b90b09552fcc2cc7778ea384a195d97850282bbab941aa1d37fd4c314d94ac

postgres-decoderbufs-debuginfo-0.10.0-2.module+el8.4.0+11288+c193d6d7.x86_64.rpm

SHA-256: a30fa22fccb754620843adaba31b89c77e7c757cba5fc3707804b51190dd02ef

postgres-decoderbufs-debugsource-0.10.0-2.module+el8.4.0+11288+c193d6d7.x86_64.rpm

SHA-256: 5def5e99e1ff1ae1444788ab565fcd9d0ba1b9bea1a1650c3302fdaca8585ec3

postgresql-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: c0df39611cdc4476b96160ca07abb02ba1e62334e8ae086fda479c6347e0a052

postgresql-contrib-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 11c70db47ac826dd48138c64979e78865b6f684efc13d57378568d4a9117e872

postgresql-contrib-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 4d5766639ebcc091797ba3fd48f620bee19f4a61a7bb6fd10e2ad87476acfc26

postgresql-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 5b65bea74bb993e947d1a01addcc8df1f3127dfc16e2d0a58505203a10232faf

postgresql-debugsource-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 68cbdf2c9846256810f5fabcf0f14a0000dba64276d13ae90f12a26b73b7d394

postgresql-docs-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 3492bf1032c6cd5bd120706bc7fdb786678ecf62aae9b513db87cb009b8d3e4a

postgresql-docs-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 408e6befe5432b2e422b39df6ef00894b291e0ac97841b4d01fd2eaef8d44693

postgresql-plperl-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: cbd106740648e7fec91ab7455a433b1fab6577d9f46f27e92c976d3853c5730d

postgresql-plperl-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 005c13bec3a5c1924fe8593cfd84cb3fb22a24c9b2a7b12ad1c5a4d89d7cef2e

postgresql-plpython3-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 55139d086b20b2790c767b6c0341b34d7397c3a354eb3e875af372c30f5c7a8d

postgresql-plpython3-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 391ab3317c53ce87551b9f703f390c80ddc4030c96dde494313fb1a713cd9d8b

postgresql-pltcl-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: c8f34317e890972cb9412528b28928c8a0783f2f21cfff66c791295f84ffa5c6

postgresql-pltcl-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 0a2a973ee748784cf51a2e63264d8ba2263a0ca6cc354740808ec2a42a18e6e6

postgresql-server-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 7e39fd93f5aca9fa0bc96b7b840288e83f19ba178c4376ac2ca733f38777de37

postgresql-server-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 38e8419b5d4fefcf51f39f7bfad83e9efb1b47fa28b12930f41593898903edd1

postgresql-server-devel-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: d9ad5c875670f08dceb55dbe61caff2e58dc74008f941a210d7e9eafe2332780

postgresql-server-devel-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 19c4d960f65ecbc5d5e3b0fa726ae25c756aca33e7ed5c8ad013bb23f6ee2f74

postgresql-static-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 4a30be0be7fd5e444660a1ae48024470cdac306207dbe715322c8bb94f515d70

postgresql-test-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: b790ce5753f7d499e9a003a4dda98eff260de9ed294c964791cb1342d8a8d113

postgresql-test-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: d428cc9a814eb063c3e346876bd8c743db50c5235717794eff838cee2dd9aad2

postgresql-upgrade-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 8bdd47beb614ba788a7c5c6747a53b305e4e905a49603279c20b7e3701366902

postgresql-upgrade-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 615b4636ba8696d9b02b2e87d2bbc26d5ee826d9c359b3f1f12f94c634372e9f

postgresql-upgrade-devel-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: ef33fb9e34911b353061c66fdc931409d5d7e0a74bc5c9808cc9a82400598629

postgresql-upgrade-devel-debuginfo-12.11-2.module+el8.4.0+15406+aeb4ae67.x86_64.rpm

SHA-256: 41f369cb291762b652a2ab734f30c078ef3891a64449295ad76003ff8cd8883d

Red Hat Enterprise Linux Server - AUS 8.4