Headline

RHSA-2023:4535: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-41862: A flaw was found In PostgreSQL. A modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions, a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
CVE-2023-2454: A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code.
CVE-2023-2455: A flaw was found in PostgreSQL, which could permit incorrect policies being applied in certain cases where role-specific policies are used and a given query is planned under one role and executed under other roles. This scenario can happen under security definer functions, or when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a user to complete otherwise forbidden reads and modifications. This only affects databases that have used CREATE POLICY to define a row security policy.

1 year ago

Red Hat Security Data

Open in Source

#sql #vulnerability #mac #linux #red_hat #perl #auth #ibm #postgres #sap

Red Hat Enterprise Linux for x86_64 8

SRPM

pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.src.rpm

SHA-256: 82c8ea0e72ae72fc696a5bffd3ff569476d7210a9506ad99c98c48c163a37843

pgaudit-1.4.0-5.module+el8.5.0+11354+78b3c9c5.src.rpm

SHA-256: 45156076f19a7507973697923e14147b1285d7bb00615978a347aa878e384aae

postgres-decoderbufs-0.10.0-2.module+el8.5.0+11354+78b3c9c5.src.rpm

SHA-256: b521220b59d18b13b7a35c744b144c952ebde08f2553747cecc0e86b8737eaea

postgresql-12.15-1.module+el8.8.0+19427+d1071523.src.rpm

SHA-256: a04272d180ee0f11c16fca865e58f9d54ebdd02c4ddd2768ce5ef0c8093640df

x86_64

postgresql-test-rpm-macros-12.15-1.module+el8.8.0+19427+d1071523.noarch.rpm

SHA-256: 9add4222b0cd753b613256f06ccace325a811a9bf453ebb5a349010d3d47ed71

pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: cb60723f9b6e3601abcb4c474a4878f8582b1edde031af7e721df820da5b62dd

pg_repack-debuginfo-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: c8caad1c9ba892a7e2de313f3b1738cb6fefaf427fc5d483a8521b97e8e1a02c

pg_repack-debugsource-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: a8741b343a45194fe30396317552c1aa3776fa9a9d73beee505db60c7996370e

pgaudit-1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: e56e99127598dbabd012dd019b7a4c33a738add836a0aa5f4b489cc8513d10b4

pgaudit-debuginfo-1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: ba48771ef15f6946785b8f016e420cc502344a0248262fb55034b3d011fec2a6

pgaudit-debugsource-1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 256f06fce473bd9eadcb7465a0e6bdf551c92c49778ac6ec91847eb1932db840

postgres-decoderbufs-0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 2eb5e674808b184a01f53b8bf84b334bf210b1affaad6dda7c599eb42065922c

postgres-decoderbufs-debuginfo-0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 53bcf8ca8e4d43b7185391409dd87f5604a437d9b15a25f4113927545e8e1450

postgres-decoderbufs-debugsource-0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 9610cb4d1cd18812a51b238a38e1260e8b86243b4cb4536da621195e148313ef

postgresql-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 1d3d79af3b7b2bb629ed215a18ee10e9a5fe0eabbd0121dcc898aaef7b2821df

postgresql-contrib-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: df25c6b0e06550dc9d7944d686d3115037a38dfd0edc81c09b3e319764836548

postgresql-contrib-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: c573ceb5adeb98101b0a5aa9a1ba31f49924d68a5ff4494cafc3aa1b37f9dddb

postgresql-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: bf914a2db2ebb45919c468c66be89227ab347805a0f80fba9a714edd783238e0

postgresql-debugsource-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: e635795676f3a2e2e32a56881412cdaf7ea2b017a1444b9b6420a1afce53f2e1

postgresql-docs-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 6233b1e1ffbab7ba56a0a95cf9c54105598b5356c07be676fdfb06a8fd4c9a5b

postgresql-docs-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: dca006a21f1beb81e43317c569730b48ce349fa0670c450c6a8b1a805d1c5f7b

postgresql-plperl-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: bb85b78919f35dd3ce6df91c5b363ffb5cf77594244e4596743f0ed251dd3988

postgresql-plperl-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 3f53a8339684390b61d398d89eeacc051c912005090d5ce32753a5d05ab2446f

postgresql-plpython3-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: a5ecc27c5bc5a39f9993c06c62c645004e29897fcd125dca59b4d510219e85d5

postgresql-plpython3-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 58ae5a679457721769049f2694a1da52cacf620f7c9745a6e7b4e63e80d15fac

postgresql-pltcl-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: b3f00ff51ec810498c14fe0b00f212d4c63f4973194fcf75b00485b92462ad6e

postgresql-pltcl-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: c746d38b3ada4a725c4502127a7ce4f6c6f7cd5433e234b0284c2e19bd64e755

postgresql-server-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: e8504f8785c264ec04ff09993945889372665dd4b7e469ef41d242e985f03582

postgresql-server-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: c5214613a5b2184afc54dde68f64b8f690b70e7a026377e0b49d85e69cd95893

postgresql-server-devel-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 82e4ef166d38fbc028e3dc5ae695b9f7ec1b8bb06c7d51592d60d6a8f0a65b5c

postgresql-server-devel-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 1a49438d8610e552b4719ebf65d00a89373bb5173b7f71682d60e907a423fcf7

postgresql-static-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 50f3850f7882e32b32315281a8f1b9663823d925b27fc11d15d3ddd99c360bfa

postgresql-test-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 16e867e0a4d2721e2f0b5240a5de740d58a91b1fdba2643a9e6d80c1e3a32f1c

postgresql-test-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 6d5ce39673c3ad9517260804c857fe555cb410563d8b53bb8c17b57d6e4bce0e

postgresql-upgrade-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 86d48cb6556a4033cea8cbae2883620618f2f3a93b807e7cb77064f01351962a

postgresql-upgrade-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: 5f4516dd1dd90467d70fdc896885d8fc9004211c43eb66edaa9d79762437dbe4

postgresql-upgrade-devel-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: bf629892c13ecf11883c4e0d70272d084a423dba7b8ad21540debda7524ad5a3

postgresql-upgrade-devel-debuginfo-12.15-1.module+el8.8.0+19427+d1071523.x86_64.rpm

SHA-256: c294a8cf66315b71b31b53612759bee191aa668418fd1afdd2f2ef1e3fa0bade

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8