logo
DATABASE RESOURCES PRICING ABOUT US

Important: postgresql

Description

**Issue Overview:** A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity. (CVE-2022-1552) **Affected Packages:** postgresql **Issue Correction:** Run _yum update postgresql_ to update your system. **New Packages:** aarch64:     postgresql-9.2.24-8.amzn2.aarch64     postgresql-libs-9.2.24-8.amzn2.aarch64     postgresql-server-9.2.24-8.amzn2.aarch64     postgresql-docs-9.2.24-8.amzn2.aarch64     postgresql-contrib-9.2.24-8.amzn2.aarch64     postgresql-devel-9.2.24-8.amzn2.aarch64     postgresql-static-9.2.24-8.amzn2.aarch64     postgresql-upgrade-9.2.24-8.amzn2.aarch64     postgresql-plperl-9.2.24-8.amzn2.aarch64     postgresql-plpython-9.2.24-8.amzn2.aarch64     postgresql-pltcl-9.2.24-8.amzn2.aarch64     postgresql-test-9.2.24-8.amzn2.aarch64     postgresql-debuginfo-9.2.24-8.amzn2.aarch64 i686:     postgresql-9.2.24-8.amzn2.i686     postgresql-libs-9.2.24-8.amzn2.i686     postgresql-server-9.2.24-8.amzn2.i686     postgresql-docs-9.2.24-8.amzn2.i686     postgresql-contrib-9.2.24-8.amzn2.i686     postgresql-devel-9.2.24-8.amzn2.i686     postgresql-static-9.2.24-8.amzn2.i686     postgresql-upgrade-9.2.24-8.amzn2.i686     postgresql-plperl-9.2.24-8.amzn2.i686     postgresql-plpython-9.2.24-8.amzn2.i686     postgresql-pltcl-9.2.24-8.amzn2.i686     postgresql-test-9.2.24-8.amzn2.i686     postgresql-debuginfo-9.2.24-8.amzn2.i686 src:     postgresql-9.2.24-8.amzn2.src x86_64:     postgresql-9.2.24-8.amzn2.x86_64     postgresql-libs-9.2.24-8.amzn2.x86_64     postgresql-server-9.2.24-8.amzn2.x86_64     postgresql-docs-9.2.24-8.amzn2.x86_64     postgresql-contrib-9.2.24-8.amzn2.x86_64     postgresql-devel-9.2.24-8.amzn2.x86_64     postgresql-static-9.2.24-8.amzn2.x86_64     postgresql-upgrade-9.2.24-8.amzn2.x86_64     postgresql-plperl-9.2.24-8.amzn2.x86_64     postgresql-plpython-9.2.24-8.amzn2.x86_64     postgresql-pltcl-9.2.24-8.amzn2.x86_64     postgresql-test-9.2.24-8.amzn2.x86_64     postgresql-debuginfo-9.2.24-8.amzn2.x86_64 ### Additional References Red Hat: [CVE-2022-1552](<https://access.redhat.com/security/cve/CVE-2022-1552>) Mitre: [CVE-2022-1552](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1552>)


Affected Package


OS OS Version Package Name Package Version
Amazon Linux 2 postgresql 9.2.24-8.amzn2
Amazon Linux 2 postgresql-libs 9.2.24-8.amzn2
Amazon Linux 2 postgresql-server 9.2.24-8.amzn2
Amazon Linux 2 postgresql-docs 9.2.24-8.amzn2
Amazon Linux 2 postgresql-contrib 9.2.24-8.amzn2
Amazon Linux 2 postgresql-devel 9.2.24-8.amzn2
Amazon Linux 2 postgresql-static 9.2.24-8.amzn2
Amazon Linux 2 postgresql-upgrade 9.2.24-8.amzn2
Amazon Linux 2 postgresql-plperl 9.2.24-8.amzn2
Amazon Linux 2 postgresql-plpython 9.2.24-8.amzn2
Amazon Linux 2 postgresql-pltcl 9.2.24-8.amzn2
Amazon Linux 2 postgresql-test 9.2.24-8.amzn2
Amazon Linux 2 postgresql-debuginfo 9.2.24-8.amzn2
Amazon Linux 2 postgresql 9.2.24-8.amzn2
Amazon Linux 2 postgresql-libs 9.2.24-8.amzn2
Amazon Linux 2 postgresql-server 9.2.24-8.amzn2
Amazon Linux 2 postgresql-docs 9.2.24-8.amzn2
Amazon Linux 2 postgresql-contrib 9.2.24-8.amzn2
Amazon Linux 2 postgresql-devel 9.2.24-8.amzn2
Amazon Linux 2 postgresql-static 9.2.24-8.amzn2
Amazon Linux 2 postgresql-upgrade 9.2.24-8.amzn2
Amazon Linux 2 postgresql-plperl 9.2.24-8.amzn2
Amazon Linux 2 postgresql-plpython 9.2.24-8.amzn2
Amazon Linux 2 postgresql-pltcl 9.2.24-8.amzn2
Amazon Linux 2 postgresql-test 9.2.24-8.amzn2
Amazon Linux 2 postgresql-debuginfo 9.2.24-8.amzn2
Amazon Linux 2 postgresql 9.2.24-8.amzn2
Amazon Linux 2 postgresql 9.2.24-8.amzn2
Amazon Linux 2 postgresql-libs 9.2.24-8.amzn2
Amazon Linux 2 postgresql-server 9.2.24-8.amzn2
Amazon Linux 2 postgresql-docs 9.2.24-8.amzn2
Amazon Linux 2 postgresql-contrib 9.2.24-8.amzn2
Amazon Linux 2 postgresql-devel 9.2.24-8.amzn2
Amazon Linux 2 postgresql-static 9.2.24-8.amzn2
Amazon Linux 2 postgresql-upgrade 9.2.24-8.amzn2
Amazon Linux 2 postgresql-plperl 9.2.24-8.amzn2
Amazon Linux 2 postgresql-plpython 9.2.24-8.amzn2
Amazon Linux 2 postgresql-pltcl 9.2.24-8.amzn2
Amazon Linux 2 postgresql-test 9.2.24-8.amzn2
Amazon Linux 2 postgresql-debuginfo 9.2.24-8.amzn2

Related