Medium ELSA-2023-3714 2 CVEs

Moderate: postgresql security update (Oracle Linux 9)

Published Jun 22, 2023 · Updated Jun 22, 2023

Ecosystem: Oracle Linux

Summary

[13.11-1.0.1]
- Fixed postgresql port binding issue during bootup [Orabug: 35420628]

[13.11-1]
- Update to 13.11
- Resolves: #2207935

Fixed packages 14

Release	Package	Fixed in
Oracle Linux · 9	postgresql	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-contrib	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-docs	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-plperl	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-plpython3	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-pltcl	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-private-devel	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-private-libs	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-server	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-server-devel	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-static	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-test	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-upgrade	0:13.11-1.0.1.el9_2
Oracle Linux · 9	postgresql-upgrade-devel	0:13.11-1.0.1.el9_2

Vulnerabilities 2

High 7.2

CVE-2023-2454

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could per…

postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine

Jun 9, 2023
Medium 5.4

CVE-2023-2455

Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applie…

postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine

Jun 9, 2023