Lucene search

K
redhatRedHatRHSA-2023:7883
HistoryDec 20, 2023 - 9:19 a.m.

(RHSA-2023:7883) Important: postgresql:15 security update

2023-12-2009:19:16
access.redhat.com
17
postgresql
security update
buffer overrun
memory disclosure
sql injection
role pg_signal_backend
cve-2023-5869
cve-2023-5868
cve-2023-39417
cve-2023-5870
cve-2023-39418
object-relational database management system
merge
cvss score
acknowledgments
references
unix

9.4 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.7%

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)

  • postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868)

  • postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417)

  • postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870)

  • postgresql: MERGE fails to enforce UPDATE or SELECT row security policies (CVE-2023-39418)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lepostgresql-upgrade-debuginfo< 15.5-1.module+el8.8.0+20658+5fb3eeddpostgresql-upgrade-debuginfo-15.5-1.module+el8.8.0+20658+5fb3eedd.ppc64le.rpm
RedHatanyaarch64postgres-decoderbufs< 1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4postgres-decoderbufs-1.9.7-1.Final.module+el8.8.0+17071+aaaceaa4.aarch64.rpm
RedHatanyppc64lepostgresql-private-libs< 15.5-1.module+el8.8.0+20658+5fb3eeddpostgresql-private-libs-15.5-1.module+el8.8.0+20658+5fb3eedd.ppc64le.rpm
RedHatanyx86_64postgresql-pltcl-debuginfo< 15.5-1.module+el8.8.0+20658+5fb3eeddpostgresql-pltcl-debuginfo-15.5-1.module+el8.8.0+20658+5fb3eedd.x86_64.rpm
RedHatanys390xpostgresql-plpython3-debuginfo< 15.5-1.module+el8.8.0+20658+5fb3eeddpostgresql-plpython3-debuginfo-15.5-1.module+el8.8.0+20658+5fb3eedd.s390x.rpm
RedHatanyppc64lepgaudit-debuginfo< 1.7.0-1.module+el8.8.0+17071+aaaceaa4pgaudit-debuginfo-1.7.0-1.module+el8.8.0+17071+aaaceaa4.ppc64le.rpm
RedHatanys390xpostgresql-upgrade-devel-debuginfo< 15.5-1.module+el8.8.0+20658+5fb3eeddpostgresql-upgrade-devel-debuginfo-15.5-1.module+el8.8.0+20658+5fb3eedd.s390x.rpm
RedHatanys390xpostgresql-server-devel< 15.5-1.module+el8.8.0+20658+5fb3eeddpostgresql-server-devel-15.5-1.module+el8.8.0+20658+5fb3eedd.s390x.rpm
RedHatanyaarch64postgresql-upgrade-debuginfo< 15.5-1.module+el8.8.0+20658+5fb3eeddpostgresql-upgrade-debuginfo-15.5-1.module+el8.8.0+20658+5fb3eedd.aarch64.rpm
RedHatanyaarch64postgresql-pltcl< 15.5-1.module+el8.8.0+20658+5fb3eeddpostgresql-pltcl-15.5-1.module+el8.8.0+20658+5fb3eedd.aarch64.rpm
Rows per page:
1-10 of 1451