postgresql:10 security update

2024-03-1215:41:47

Rockylinux Product Errata

errata.rockylinux.org

postgresql

security update

rocky linux 8

cve-2024-0985

cvss score

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

JSON

An update is available for module.postgresql, postgresql.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

postgresql: non-owner ‘REFRESH MATERIALIZED VIEW CONCURRENTLY’ executes arbitrary SQL (CVE-2024-0985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
rocky8aarch64postgresql< 10.23-4.module+el8.9.0+1734+74bd286cpostgresql-0:10.23-4.module+el8.9.0+1734+74bd286c.aarch64.rpm
rocky8x86_64postgresql< 10.23-4.module+el8.9.0+1734+74bd286cpostgresql-0:10.23-4.module+el8.9.0+1734+74bd286c.x86_64.rpm
rocky8aarch64postgresql-contrib< 10.23-4.module+el8.9.0+1734+74bd286cpostgresql-contrib-0:10.23-4.module+el8.9.0+1734+74bd286c.aarch64.rpm
rocky8x86_64postgresql-contrib< 10.23-4.module+el8.9.0+1734+74bd286cpostgresql-contrib-0:10.23-4.module+el8.9.0+1734+74bd286c.x86_64.rpm
rocky8aarch64postgresql-contrib-debuginfo< 10.23-4.module+el8.9.0+1734+74bd286cpostgresql-contrib-debuginfo-0:10.23-4.module+el8.9.0+1734+74bd286c.aarch64.rpm
rocky8x86_64postgresql-contrib-debuginfo< 10.23-4.module+el8.9.0+1734+74bd286cpostgresql-contrib-debuginfo-0:10.23-4.module+el8.9.0+1734+74bd286c.x86_64.rpm
rocky8aarch64postgresql-debuginfo< 10.23-4.module+el8.9.0+1734+74bd286cpostgresql-debuginfo-0:10.23-4.module+el8.9.0+1734+74bd286c.aarch64.rpm
rocky8x86_64postgresql-debuginfo< 10.23-4.module+el8.9.0+1734+74bd286cpostgresql-debuginfo-0:10.23-4.module+el8.9.0+1734+74bd286c.x86_64.rpm
rocky8aarch64postgresql-debugsource< 10.23-4.module+el8.9.0+1734+74bd286cpostgresql-debugsource-0:10.23-4.module+el8.9.0+1734+74bd286c.aarch64.rpm
rocky8x86_64postgresql-debugsource< 10.23-4.module+el8.9.0+1734+74bd286cpostgresql-debugsource-0:10.23-4.module+el8.9.0+1734+74bd286c.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
rocky	8	aarch64	postgresql	< 10.23-4.module+el8.9.0+1734+74bd286c	postgresql-0:10.23-4.module+el8.9.0+1734+74bd286c.aarch64.rpm
rocky	8	x86_64	postgresql	< 10.23-4.module+el8.9.0+1734+74bd286c	postgresql-0:10.23-4.module+el8.9.0+1734+74bd286c.x86_64.rpm
rocky	8	aarch64	postgresql-contrib	< 10.23-4.module+el8.9.0+1734+74bd286c	postgresql-contrib-0:10.23-4.module+el8.9.0+1734+74bd286c.aarch64.rpm
rocky	8	x86_64	postgresql-contrib	< 10.23-4.module+el8.9.0+1734+74bd286c	postgresql-contrib-0:10.23-4.module+el8.9.0+1734+74bd286c.x86_64.rpm
rocky	8	aarch64	postgresql-contrib-debuginfo	< 10.23-4.module+el8.9.0+1734+74bd286c	postgresql-contrib-debuginfo-0:10.23-4.module+el8.9.0+1734+74bd286c.aarch64.rpm
rocky	8	x86_64	postgresql-contrib-debuginfo	< 10.23-4.module+el8.9.0+1734+74bd286c	postgresql-contrib-debuginfo-0:10.23-4.module+el8.9.0+1734+74bd286c.x86_64.rpm
rocky	8	aarch64	postgresql-debuginfo	< 10.23-4.module+el8.9.0+1734+74bd286c	postgresql-debuginfo-0:10.23-4.module+el8.9.0+1734+74bd286c.aarch64.rpm
rocky	8	x86_64	postgresql-debuginfo	< 10.23-4.module+el8.9.0+1734+74bd286c	postgresql-debuginfo-0:10.23-4.module+el8.9.0+1734+74bd286c.x86_64.rpm
rocky	8	aarch64	postgresql-debugsource	< 10.23-4.module+el8.9.0+1734+74bd286c	postgresql-debugsource-0:10.23-4.module+el8.9.0+1734+74bd286c.aarch64.rpm
rocky	8	x86_64	postgresql-debugsource	< 10.23-4.module+el8.9.0+1734+74bd286c	postgresql-debugsource-0:10.23-4.module+el8.9.0+1734+74bd286c.x86_64.rpm