Summary
pgaudit
[16.0-1]
- Update to 16.0
- Support postgresql 16
- Initial import for PG 16 module
- Resolves: RHEL-3636
pg_repack
[1.5.1-1]
- Update to 1.5.1
postgres-decoderbufs
[2.4.0-1.Final]
- Initial import for postgresql 16 stream
- Related: RHEL-3636
postgresql
[16.6-1]
- Update to 16.6
- Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979
[16.4-1]
- Update to 16.4
- Fix CVE-2024-7348
[16.1-1]
- Update to 16.1
- Update upgrade server to 15.5
- Resolves: RHEL-3635
[16.0-1]
- New postgresql stream - 16
- Remove pdf documentation
- Update postgresql-setup to 8.9
- postmaster binary no more shipped
- Resolves: RHEL-3636
[15.3-1]
- Update to upstream version 15.3
- Fixes: CVE-2023-2454 CVE-2023-2455
- Resolves: #2207934
[15.2-1]
- Update to upstream version 15.2
- Update postgresql-setup to 8.8
- PostgreSQL systemd unit waits for the network to be up
- Resolves: #2128241
[15.0-1]
- Initial import for postgresql 15
- Specfile is based on version locate in centos stream
It reflects changes with libpq. This version of databse server
will use private libpq library.
- Resolves: #2128241
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pg_repack | 0:1.5.1-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | pgaudit | 0:16.0-1.module+el8.10.0+90275+c15b12cb |
| Oracle Linux · 8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+90275+c15b12cb |
| Oracle Linux · 8 | postgresql | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-contrib | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-docs | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-plperl | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-plpython3 | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-pltcl | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-private-devel | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-private-libs | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-server | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-server-devel | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-static | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-test | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-test-rpm-macros | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-upgrade | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
| Oracle Linux · 8 | postgresql-upgrade-devel | 0:16.6-1.module+el8.10.0+90451+109c7b24 |
Vulnerabilities 3
-
High 8.8
PostgreSQL PL/Perl environment variable changes execute arbitrary code
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database …
-
Medium 4.2
PostgreSQL row security below e.g. subqueries disregards user ID changes
Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where …
-
Medium 4.2
PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. The problem a…