Headline

RHSA-2022:7128: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-2625: postgresql: Extension scripts replace objects not belonging to the extension.

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #mac #linux #red_hat #perl #ibm #postgres #sap

Synopsis

Moderate: postgresql:12 security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

postgresql: Extension scripts replace objects not belonging to the extension. (CVE-2022-2625)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

If the postgresql service is running, it will be automatically restarted after installing this update.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2113825 - CVE-2022-2625 postgresql: Extension scripts replace objects not belonging to the extension.

Red Hat Enterprise Linux for x86_64 8

SRPM

pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.src.rpm

SHA-256: 82c8ea0e72ae72fc696a5bffd3ff569476d7210a9506ad99c98c48c163a37843

pgaudit-1.4.0-5.module+el8.5.0+11354+78b3c9c5.src.rpm

SHA-256: 45156076f19a7507973697923e14147b1285d7bb00615978a347aa878e384aae

postgres-decoderbufs-0.10.0-2.module+el8.5.0+11354+78b3c9c5.src.rpm

SHA-256: b521220b59d18b13b7a35c744b144c952ebde08f2553747cecc0e86b8737eaea

postgresql-12.12-1.module+el8.6.0+16796+0abe6678.src.rpm

SHA-256: 0fe6a80c7d0f14996443cf44c93907f7e3dcaeda4c07abb6201416c87d6d5575

x86_64

pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: cb60723f9b6e3601abcb4c474a4878f8582b1edde031af7e721df820da5b62dd

pg_repack-debuginfo-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: c8caad1c9ba892a7e2de313f3b1738cb6fefaf427fc5d483a8521b97e8e1a02c

pg_repack-debugsource-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: a8741b343a45194fe30396317552c1aa3776fa9a9d73beee505db60c7996370e

pgaudit-1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: e56e99127598dbabd012dd019b7a4c33a738add836a0aa5f4b489cc8513d10b4

pgaudit-debuginfo-1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: ba48771ef15f6946785b8f016e420cc502344a0248262fb55034b3d011fec2a6

pgaudit-debugsource-1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 256f06fce473bd9eadcb7465a0e6bdf551c92c49778ac6ec91847eb1932db840

postgres-decoderbufs-0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 2eb5e674808b184a01f53b8bf84b334bf210b1affaad6dda7c599eb42065922c

postgres-decoderbufs-debuginfo-0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 53bcf8ca8e4d43b7185391409dd87f5604a437d9b15a25f4113927545e8e1450

postgres-decoderbufs-debugsource-0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 9610cb4d1cd18812a51b238a38e1260e8b86243b4cb4536da621195e148313ef

postgresql-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 9f6241b56aa6ea8e04cf158c8dc6877ee05ddfcadb227af44c9f67859c08d58c

postgresql-contrib-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 4474fbcc2b01e55c535cb0c82ecf044f97c59622c483ab258195fc45343c269e

postgresql-contrib-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: b3b47193b234fc0f4307c5135c28009cae6862e233ebf4800ba131c2c7ae208b

postgresql-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 205f5ed115cbdbe1066a9c8786862fd920eb625a956a71e346ebb67a00edfb78

postgresql-debugsource-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 8509feeb2636271987bd3865f7bb0f5f595296de6b04295a37ab700e1da4a8f4

postgresql-docs-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 9aab9ca9dd1cfc625a05416d151bb23274618d56c554e64e7eccc8561275ebe9

postgresql-docs-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: fd397de69b1df301e70b930d08f073726585c0df819b4f3ceeb39e93999177b2

postgresql-plperl-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: ff2ea9b33be804cb6b1c755728977b10b862e8bc0c886b778e0912f7844dc635

postgresql-plperl-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 1febd417e96b2f4affc197e83f337974ca4baf56be6671c32e6f8d1d175f3eb8

postgresql-plpython3-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: c5eae459d5179d6fba392285625cf5ff406301e16bd4b6b35754134ef9c50aeb

postgresql-plpython3-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: edd5cce0fb4954ffc5b93905dbcde5d4c3c7b78fe8fbb487fd1e00f652ec1b69

postgresql-pltcl-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 85c8b7728b2950002974e5b1d1f3af1c4c226d8756e420341c75067e785193bf

postgresql-pltcl-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 3344f909b2edb33333195817576d3dab8acfe980514c1a1e4e4f9cb34b6fb306

postgresql-server-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 9ccfc0c67dacd7530c74c219b8ab4e5ab6360219ddfe71f0b9fe5100527f9649

postgresql-server-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: f108951ec650388133fd6ffd6b63b5aa11a0ff575af2f45e35777e00ec85fb01

postgresql-server-devel-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 3c98b493a7b8376fe84604aef9378a76f5ede055c9a40b1efea23fdca12d145b

postgresql-server-devel-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: ea8b47b9b49c962955e02a9fcd96138ca27affbaf7a88a2db1daf0e2d35b2075

postgresql-static-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: ebcc8477db0b0d53f91a1e2f2fadabd6c65bb60ae40243ca240cd94e444e6704

postgresql-test-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 0e89b8cc1b5d7f5755ba1b6c3ffdaf37db04d0ff0e53ac12af289644b03c1df4

postgresql-test-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 8454132ded714cd3202e9ad066ac6270ba4891cf07484ae54dd29f1b18134773

postgresql-test-rpm-macros-12.12-1.module+el8.6.0+16796+0abe6678.noarch.rpm

SHA-256: c5329b1f6240e72334aaed032e4eccd64277391c8ce1911ac83a25e264e02fc7

postgresql-upgrade-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 0adc23efb5ed64adcfb8cf4a5b3f0f405f937f9a681431726aeed3f15c79502a

postgresql-upgrade-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: 75cddf85b4eb0592701df017741a1978cbe43631eaf2cf80643839bbc9c99dbe

postgresql-upgrade-devel-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: eb1683f46eb2dadfc32a33f226763ed45d90e0e8112bef496bf57f665d7f3c0b

postgresql-upgrade-devel-debuginfo-12.12-1.module+el8.6.0+16796+0abe6678.x86_64.rpm

SHA-256: f64d9f455d973d125b1458a342d01d74dd05cea0cc964545a6e7ddf58ec97eaa

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6