Headline

RHSA-2022:4895: Red Hat Security Advisory: postgresql:10 security update

An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-1552: postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #mac #linux #red_hat #perl #ibm #postgres #sap

Synopsis

Important: postgresql:10 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (10.21).

Security Fix(es):

postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox (CVE-2022-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

If the postgresql service is running, it will be automatically restarted after installing this update.

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
Red Hat Enterprise Linux Server - TUS 8.2 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.2 x86_64

Fixes

BZ - 2081126 - CVE-2022-1552 postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2

SRPM

postgresql-10.21-2.module+el8.2.0+15340+c4468608.src.rpm

SHA-256: 1bb3d7063b0ea392e90f40bddc33a6bcc7d5e7f74743cf71969a8f2bf1f8d769

x86_64

postgresql-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 39cae7f9e82879226412b321bb47b8338320572ca250eba8865db9ef0cf5f046

postgresql-contrib-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 857520bd5cdf664f2b931c11f269fd47f0098fffac02703b5b9225a686a2b114

postgresql-contrib-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 94bda58225946d8b092449df94c89cdf2492aff5b55468e58e07783917d45297

postgresql-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 1535936e7c1e514867d92729ac0f54d4261130f0696be020e35e2c4a72759eaf

postgresql-debugsource-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: f57689019ee83b8f1fa7357abaa8b9adfe0e074dabfea7e0b602e031ef3f5d0b

postgresql-docs-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: d2e5c61dee9091623f0c7f0eb82bd41316eb1d395a57318ee11a55f2496d1670

postgresql-docs-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 594d856e4bfbd59c4f97925a3a55aa5f1d1e0d56529d4023a00e91274335ec6d

postgresql-plperl-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 4d0d1989774097a2dd233ff91541e1154bd5d75c813b9ced1e2696921acd1f14

postgresql-plperl-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: bf94edb60a9db5f0ee9582e7cbd1d2ee3e11d09184b5bab01017906ce674efa9

postgresql-plpython3-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 30fc1e50f37bf2b23521f2cf2f40d6c071fa40dafa9dc3e23d5da982a64a330b

postgresql-plpython3-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 359f3561fdac206de71e20e8050d04fdf06f11be8a09411750f982ae852284c3

postgresql-pltcl-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 723c05962921018e41c3bd80ec49b6fa75340b42a9e9c370904145933112ed8e

postgresql-pltcl-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 74d0d558d37646ffc3becf7a45ccda705793a1686e8f3b8b2f3d8003b915e713

postgresql-server-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 26117b3f08abcbd411ecf2f8e1cb81ac16c11d609816b2cec8c58ddd8c92e748

postgresql-server-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 0d4aed229aec8ef03bc946a62339e7bf0f74673a7708fa02d5d94ce1e22f19f6

postgresql-server-devel-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 7c18c6258e0ee9fc430b65b0acf69321681b46907d249b56b1797e299db6dc91

postgresql-server-devel-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: ea0f3556d17543a23ebddb0a6e113c960b3c14a395cd56afc4a25f6cd6b76653

postgresql-static-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 7b9f3e788a30e354734d90d8a85981eaea19001b13db2fba5662f11af2b7f2fd

postgresql-test-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 42fa9481385d7c3f2bc798b201899335ba8a6aebdceff1d5e15b7aced18789e5

postgresql-test-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 498529055b66a584c04fbd72e96456a8a2f3914d851ac6421191f7b31f3d4350

postgresql-test-rpm-macros-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 94afa9d431316f9dc625eb610f0c3a8a352f6942472a40682e24a6f2c668b230

postgresql-upgrade-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 541125e71d395a9e6d5e7a3e51877c8d6e2a1b689739ccdcd14226b8902ac5ce

postgresql-upgrade-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 2458af40394a55c27a230989e0e499a871d2385921f48f3a6df83a7fe9967c41

postgresql-upgrade-devel-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: f81a5f07d1d91cb15d943085b92738ee91233f9d3833b9d3d7bcfed05764c073

postgresql-upgrade-devel-debuginfo-10.21-2.module+el8.2.0+15340+c4468608.x86_64.rpm

SHA-256: 1d95730d2b1ef00a32fe44724cbadc9602ccd2feae358491050d55ef95879329

Red Hat Enterprise Linux Server - AUS 8.2