Headline

RHSA-2022:4805: Red Hat Security Advisory: postgresql:10 security update

An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-1552: postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #mac #linux #red_hat #perl #ibm #postgres #sap

Synopsis

Important: postgresql:10 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (10.21).

Security Fix(es):

postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox (CVE-2022-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

If the postgresql service is running, it will be automatically restarted after installing this update.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2081126 - CVE-2022-1552 postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

Red Hat Enterprise Linux for x86_64 8

SRPM

postgresql-10.21-2.module+el8.6.0+15342+53518fac.src.rpm

SHA-256: 2b5da0816c460f496b995c048ea69ef5b57fb5650a419ac12e1c316d9695e708

x86_64

postgresql-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: e458452633129c90b9861037836666a8d4eafca980f747810aed3dcf3c978c7e

postgresql-contrib-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 2aa8c05444884fdf8ab62a87547577dd4d84d249fd3a21ab2f08f4efb8225e67

postgresql-contrib-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: bfea0b514fcfefae91588e66253308fa354e11867e45301ca8cefff078c24c12

postgresql-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 8781e309aa401072cb9064110a737c5848c1e3f105c1e9bafddf040b99f243f7

postgresql-debugsource-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 1f7a67b4d6e779bd1fab1a467ed3b1ab5e1899e8342acec8893d8bad75ad7e60

postgresql-docs-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: b98567f5c3781ebaf0134831163f160af3e821b11d4d4c17cd4abc41d1257336

postgresql-docs-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: db32ff373af1edc5aaed76f621482a4e976c774c296aa63c6385d15ec883fc1e

postgresql-plperl-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 1b09e43be24bd9b29dac0a58a3208c73c07298fb71810bc118843ebfaf44569e

postgresql-plperl-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: f9bd3d15c5b53bd88ee242ac7539c00e2a9c75903993196c49f8b318a8d6e89b

postgresql-plpython3-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 14b6010bd6c254291358795f9791d78d88f0bc2cf6f2a7d976da9d6d9036ccf9

postgresql-plpython3-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 1ed272084284890b99d655cbec81907ea4e23000e72cbb98c38cfbc7fcc96c17

postgresql-pltcl-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: ccd2fbd9a4a97b2061175d34ce46b20aa02be1543cc20fb165e76bf5794f2ff9

postgresql-pltcl-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: e7ffa0fd5766479d190059651300511343ef498e7dd3a517ab4d4e8c5814f16a

postgresql-server-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 7dbc674c8c35ca507562cee43eee0adfcd7ef190d44c2f986d8be2867dcdb374

postgresql-server-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: a26ab36bab8735d1b4b1d2264dfbd4d4c660ac7ea7311dae9baf62c1e321bd49

postgresql-server-devel-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: b1f29511fc1e9aa1d4f0ea65e6227d38a34a25fc5bd447897d98983abbf8d760

postgresql-server-devel-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: d15eb60fdd98bb5a1fc842714c39df12b9cac96a1f52e215a8fb3a4a52c0aebf

postgresql-static-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 7685f9c0dedddd9cffbafcf1d81011fc083ba84294ec9150f9cdc7bf2f857375

postgresql-test-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 33408ca01701eae6a587f099e83cb0a3da31b92203cf6d6d54f1992c537864d5

postgresql-test-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 0f1e591e11f9324904c2e94e6603b3e7cabb326c7b573ee62655e90ec6801e31

postgresql-test-rpm-macros-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 1e8cf8c2eca4fc9639a5ffdd6e5c11b3c51322e4a76ca0ae0129552c854ea16b

postgresql-upgrade-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: d67caef6721c8089696afc8e93a5e1291876299dfd64ee7484693504617634ce

postgresql-upgrade-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: 1eefb2208f3439bde4516bdc8982eebcd9d228c4a06fbdd45b02b534af54722e

postgresql-upgrade-devel-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: a7c21f0a58283de4c7a05964d1b8d5368f34048e1934e682529321859c1fc85d

postgresql-upgrade-devel-debuginfo-10.21-2.module+el8.6.0+15342+53518fac.x86_64.rpm

SHA-256: f7fefd689defef63f437dbb7ab89d1c041f8491691e59f612fe8a0cfbdbb1cff

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6