Summary
PostgreSQL is an advanced object-relational database management system (DBMS).
Security Fix(es):
* postgresql: Buffer overrun from integer overflow in array modification (CVE-2023-5869)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | postgresql | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-contrib | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-docs | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-plperl | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-plpython3 | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-pltcl | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-server | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-server-devel | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-static | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-test | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-test-rpm-macros | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-upgrade | 10.23-3.module_el8.9.0+3703+a01fd377 |
| AlmaLinux · 8 | postgresql-upgrade-devel | 10.23-3.module_el8.9.0+3703+a01fd377 |
Vulnerabilities 1
-
High 8.8
Postgresql: buffer overrun from integer overflow in array modification
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user c…