Summary
PostgreSQL is an advanced object-relational database management system (DBMS).
Security Fix(es):
* postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)
* postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)
* postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | pg_repack | 1.5.1-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | pg_repack | 1.5.1-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | pgaudit | 16.0-1.module_el9.4.0+66+eb9878bc |
| AlmaLinux · 9 | pgvector | 0.6.2-1.module_el9.5.0+120+4533eb20 |
| AlmaLinux · 9 | postgres-decoderbufs | 2.4.0-1.Final.module_el9.4.0+66+eb9878bc |
| AlmaLinux · 9 | postgresql | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-contrib | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-contrib | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-docs | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-docs | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-plperl | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-plpython3 | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-plpython3 | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-pltcl | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-private-devel | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-private-devel | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-private-libs | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-private-libs | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-server | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-server | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-server-devel | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-server-devel | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-static | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-static | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-test | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-test | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-test-rpm-macros | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-upgrade | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-upgrade | 16.6-1.module_el9.5.0+127+50ff03a9 |
| AlmaLinux · 9 | postgresql-upgrade-devel | 16.6-1.module_el9.5.0+128+1095dce2 |
| AlmaLinux · 9 | postgresql-upgrade-devel | 16.6-1.module_el9.5.0+127+50ff03a9 |
Vulnerabilities 3
-
High 8.8
PostgreSQL PL/Perl environment variable changes execute arbitrary code
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database …
-
Medium 4.2
PostgreSQL row security below e.g. subqueries disregards user ID changes
Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where …
-
Medium 4.2
PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. The problem a…
References
-
report
https://access.redhat.com/security/cve/CVE-2024-10976
-
report
https://access.redhat.com/security/cve/CVE-2024-10978
-
report
https://access.redhat.com/security/cve/CVE-2024-10979
-
report
https://bugzilla.redhat.com/2326251
-
report
https://bugzilla.redhat.com/2326253
-
report
https://bugzilla.redhat.com/2326263
-
advisory
https://errata.almalinux.org/9/ALSA-2024-10788.html