Lucene search

K
rockyRockylinux Product ErrataRLSA-2023:7581
HistoryDec 06, 2023 - 11:16 p.m.

postgresql:13 security update

2023-12-0623:16:33
Rockylinux Product Errata
errata.rockylinux.org
5
postgresql
update
module
pgaudit
pg_repack
postgres-decoderbufs
buffer overrun
memory disclosure
sql injection
role signaling
vulnerability
rocky linux 8
cvss score
advanced
object-relational
dbms

8 High

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

86.6%

An update is available for module.pgaudit, postgresql, pgaudit, module.pg_repack, module.postgres-decoderbufs, pg_repack, module.postgresql, postgres-decoderbufs.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)

  • postgresql: Memory disclosure in aggregate function calls (CVE-2023-5868)

  • postgresql: extension script @substitutions@ within quoting allow SQL injection (CVE-2023-39417)

  • postgresql: Role pg_signal_backend can signal certain superuser processes. (CVE-2023-5870)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.