Skip to content
OpenAdvisories
Low ALAS2023-2024-635 1 CVE

Low: postgresql15 security update (Amazon Linux 2023)

Published Jun 6, 2024 · Updated Jun 10, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-4317: postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks

Fixed packages 30

ReleasePackageFixed in
Amazon Linux · 2023 postgresql15 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-contrib 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-contrib-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-debugsource 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-docs 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-docs-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-llvmjit 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-llvmjit-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-plperl 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-plperl-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-plpython3 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-plpython3-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-pltcl 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-pltcl-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-private-devel 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-private-libs 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-private-libs-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-server 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-server-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-server-devel 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-server-devel-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-static 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-test 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-test-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-test-rpm-macros 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-upgrade 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-upgrade-debuginfo 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-upgrade-devel 0:15.7-1.amzn2023.0.1
Amazon Linux · 2023 postgresql15-upgrade-devel-debuginfo 0:15.7-1.amzn2023.0.1

Vulnerabilities 1

  • Low 3.1
    CVE-2024-4317

    PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks

    Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs allows an unprivileged database user to read most common values and other statistics from CREATE STATISTICS commands of other users. The most common values may reveal colum…

    postgresql-14 postgresql-15 postgresql-16 postgresql Debian Ubuntu Azure Linux Wolfi

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-4317.html