Summary
[9.2.24-9]
- Backport fix for CVE-2023-5869
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | postgresql | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-contrib | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-devel | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-docs | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-libs | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-plperl | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-plpython | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-pltcl | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-server | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-static | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-test | 0:9.2.24-9.el7_9 |
| Oracle Linux · 7 | postgresql-upgrade | 0:9.2.24-9.el7_9 |
Vulnerabilities 1
-
High 8.8
Postgresql: buffer overrun from integer overflow in array modification
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user c…