Important: postgresql:13 security update

🗓️ 29 Nov 2023 00:00:00Reported by AlmaLinuxType

almalinux🔗 errata.almalinux.org👁 35 Views

PostgreSQL:13 security update with buffer overrun, memory disclosure, and SQL injection fixe

Reporter	Title	Published	Views	Family All 742
FreeBSD	postgresql-server -- Buffer overrun from integer overflow in array modification	9 Nov 202300:00	–	freebsd
FreeBSD	postgresql-server -- Memory disclosure in aggregate function calls	9 Nov 202300:00	–	freebsd
FreeBSD	postgresql-server -- Role pg_cancel_backend can signal certain superuser processes	9 Nov 202300:00	–	freebsd
FreeBSD	postgresql-server -- Extension script @substitutions@ within quoting allow SQL injection	10 Aug 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	9 Jan 202420:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is vulnerable to sensitive information disclosure (CVE-2023-5868)	15 May 202417:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	26 Mar 202504:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	10 Jul 202407:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, AngularJS, Golang Go, libcURL, PostgreSQL, Linux kernel might affect IBM Spectrum Protect Plus	24 Sep 202405:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2024.	2 Feb 202408:25	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	8	aarch64	pg_repack	1.4.6-3.module_el8.6.0+2760+1746ec94	pg_repack-1.4.6-3.module_el8.6.0+2760+1746ec94.aarch64.rpm
almalinux	8	aarch64	postgresql	13.13-1.module_el8.9.0+3692+8714f643	postgresql-13.13-1.module_el8.9.0+3692+8714f643.aarch64.rpm
almalinux	8	aarch64	postgresql-pltcl	13.13-1.module_el8.9.0+3692+8714f643	postgresql-pltcl-13.13-1.module_el8.9.0+3692+8714f643.aarch64.rpm
almalinux	8	aarch64	postgresql-docs	13.13-1.module_el8.9.0+3692+8714f643	postgresql-docs-13.13-1.module_el8.9.0+3692+8714f643.aarch64.rpm
almalinux	8	aarch64	postgresql-static	13.13-1.module_el8.9.0+3692+8714f643	postgresql-static-13.13-1.module_el8.9.0+3692+8714f643.aarch64.rpm
almalinux	8	aarch64	postgresql-plpython3	13.13-1.module_el8.9.0+3692+8714f643	postgresql-plpython3-13.13-1.module_el8.9.0+3692+8714f643.aarch64.rpm
almalinux	8	aarch64	pgaudit	1.5.0-1.module_el8.6.0+2760+1746ec94	pgaudit-1.5.0-1.module_el8.6.0+2760+1746ec94.aarch64.rpm
almalinux	8	aarch64	postgresql-server-devel	13.13-1.module_el8.9.0+3692+8714f643	postgresql-server-devel-13.13-1.module_el8.9.0+3692+8714f643.aarch64.rpm
almalinux	8	aarch64	postgresql-upgrade	13.13-1.module_el8.9.0+3692+8714f643	postgresql-upgrade-13.13-1.module_el8.9.0+3692+8714f643.aarch64.rpm
almalinux	8	aarch64	postgres-decoderbufs	0.10.0-2.module_el8.6.0+2760+1746ec94	postgres-decoderbufs-0.10.0-2.module_el8.6.0+2760+1746ec94.aarch64.rpm

Source	Link
access	www.access.redhat.com/errata/RHSA-2023:7581
access	www.access.redhat.com/security/cve/CVE-2023-39417
access	www.access.redhat.com/security/cve/CVE-2023-5868
access	www.access.redhat.com/security/cve/CVE-2023-5869
access	www.access.redhat.com/security/cve/CVE-2023-5870
bugzilla	www.bugzilla.redhat.com/2228111
bugzilla	www.bugzilla.redhat.com/2247168
bugzilla	www.bugzilla.redhat.com/2247169
bugzilla	www.bugzilla.redhat.com/2247170
errata	www.errata.almalinux.org/8/ALSA-2023-7581.html

04 Dec 2023 16:37Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.18.8

EPSS0.04322

SSVC

postgresql security fix buffer overrun memory disclosure sql injection cve-2023-5869 cve-2023-5868 cve-2023-39417 cve-2023-5870 unix