Headline

RHSA-2022:4807: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-1552: postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #mac #linux #red_hat #perl #ibm #postgres #sap

Synopsis

Important: postgresql:12 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (12.11).

Security Fix(es):

postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox (CVE-2022-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

If the postgresql service is running, it will be automatically restarted after installing this update.

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

BZ - 2081126 - CVE-2022-1552 postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

Red Hat Enterprise Linux for x86_64 8

SRPM

pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.src.rpm

SHA-256: 82c8ea0e72ae72fc696a5bffd3ff569476d7210a9506ad99c98c48c163a37843

pgaudit-1.4.0-5.module+el8.5.0+11354+78b3c9c5.src.rpm

SHA-256: 45156076f19a7507973697923e14147b1285d7bb00615978a347aa878e384aae

postgres-decoderbufs-0.10.0-2.module+el8.5.0+11354+78b3c9c5.src.rpm

SHA-256: b521220b59d18b13b7a35c744b144c952ebde08f2553747cecc0e86b8737eaea

postgresql-12.11-2.module+el8.6.0+15345+1dd8d6b8.src.rpm

SHA-256: 159074d788dcb9d93afebaef3d08bb1c89a380f4d5b5a6bcfb7b9fda7cbc4717

x86_64

postgresql-test-rpm-macros-12.11-2.module+el8.6.0+15345+1dd8d6b8.noarch.rpm

SHA-256: 881302742b7043286deb4a727c35796dc9fce9218f57cbe73d25e515251c7f4c

pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: cb60723f9b6e3601abcb4c474a4878f8582b1edde031af7e721df820da5b62dd

pg_repack-debuginfo-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: c8caad1c9ba892a7e2de313f3b1738cb6fefaf427fc5d483a8521b97e8e1a02c

pg_repack-debugsource-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: a8741b343a45194fe30396317552c1aa3776fa9a9d73beee505db60c7996370e

pgaudit-1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: e56e99127598dbabd012dd019b7a4c33a738add836a0aa5f4b489cc8513d10b4

pgaudit-debuginfo-1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: ba48771ef15f6946785b8f016e420cc502344a0248262fb55034b3d011fec2a6

pgaudit-debugsource-1.4.0-5.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 256f06fce473bd9eadcb7465a0e6bdf551c92c49778ac6ec91847eb1932db840

postgres-decoderbufs-0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 2eb5e674808b184a01f53b8bf84b334bf210b1affaad6dda7c599eb42065922c

postgres-decoderbufs-debuginfo-0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 53bcf8ca8e4d43b7185391409dd87f5604a437d9b15a25f4113927545e8e1450

postgres-decoderbufs-debugsource-0.10.0-2.module+el8.5.0+11354+78b3c9c5.x86_64.rpm

SHA-256: 9610cb4d1cd18812a51b238a38e1260e8b86243b4cb4536da621195e148313ef

postgresql-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 3d5a3df4091d1c1416ac52d039e15a708c3267b9d3dcd4bf9a46f5c2c2c4dcca

postgresql-contrib-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 2d626e3c3e8f04634f620d9df86955d366f3b5072f7184ffa39ce3f5bea67217

postgresql-contrib-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 5b2e1876b980c0a2afbcc4d7e5085559773e660ca5bd5c1333f90c076bc43e1f

postgresql-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 699bd56a3f93d23154b1da557723b16b6592426aa5b7f74602caae47e07936d2

postgresql-debugsource-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: dfb94651419e446feb134d187e20d9bc0efafb4671e8d4f5bd7d5a2f0b841fe8

postgresql-docs-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: b80228bc557cd666e41af5cda6808023c53f73857870a93628c9c36c0e9ec6f3

postgresql-docs-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: fcac101204ec09713a6b61d9ee0b317f2f058fc31a5861567f8dbfef6fb37e94

postgresql-plperl-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: a8d7867d01f7aeca8e4cd8e9b269c1ae2759c218c78f02bf0351d8c31fbc4046

postgresql-plperl-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 1f4850624b52a6e373abb145bda4724b2b5695aff489be2e7eec6cc0546e98ff

postgresql-plpython3-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: d5168fa5382cf793010a4bd1bba3175c576a3184a48dfa479940a8d3a7d68e40

postgresql-plpython3-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 2b16b3b8800646bdb67e7761f7fdcd3b04d61f110573c97d22fbb626c3f70282

postgresql-pltcl-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: c03054207851b3ada8b4b44058299060c896d041796de40bce5d42dbcea17797

postgresql-pltcl-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 5e40441e98278fb7832718ac728ace46e22f0db42c90e7a6a7f27c7d2cb9abf3

postgresql-server-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 673ff5c32a68258e9c8f27bb15ac02f22ab05a4b4090f662f7160fc3185ea239

postgresql-server-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: e303e74fb7a33362a71998f06d88270e436bfcd00ccba3845bd4b5a16f60376b

postgresql-server-devel-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 6284c2a9004c46bf5e2761043399a8843699e5e31865052da7646d8e5d295e5c

postgresql-server-devel-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 823be2e51462ebe49a203e43b472f8c005af81b94534feb1623dc9918fbbd053

postgresql-static-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 2e3b7a83d549fbdaf34e6efe97653a313d9e50d3a4a2f763d619d66efddb3839

postgresql-test-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 8bd1e34889f6b1d314a90d18869763d0d6f40ff9f5d50db0d04f20205f36f586

postgresql-test-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: c90dc3e11fdfb090ee7bb9198e31f537aed2e2c7168b64769f1ca0a0aebcd5e7

postgresql-upgrade-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 1fa57b8a2d23b82aaf168a9d9a6bb9df61ff25f75c0e386254518484622b3168

postgresql-upgrade-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: f6c8a1ca5b2f340fcfc227ac9173fb25bafb6f7fc11580e1c3e29982b88a8bb1

postgresql-upgrade-devel-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 1b371df18d565d9bbd9dab051a2935f7e968846e7aabec2072078516bfcc9388

postgresql-upgrade-devel-debuginfo-12.11-2.module+el8.6.0+15345+1dd8d6b8.x86_64.rpm

SHA-256: 7bcd81121e77384ea9d2e7b1aaf6c6ad289da77aacd6c2d5797c74f6b9b5b408

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6