Summary
pgaudit
[1.5.0-1]
- Update to version 1.5.0
Related: #1855776
[1.4.0-4]
- Bump release for rebuild against libpq-12.1-3
[1.4.0-3]
- BuildRequires libpq-devel
[1.4.0-2]
- BuildRequires postgresql-server-devel
[1.4.0-1]
- Update to 1.4.0
[1.3.1-1]
- Update to 1.3.1 and apply patch for pgsql v12 compatibility
[1.2.0-4]
- SCLize the SPEC
[1.2.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
[1.2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
[1.2.0-1]
- Initial RPM packaging for Fedora
- Based on Devrim Gunduz's packaging for PostgreSQL RPM Repo
[1.0.0-1]
- Update to 1.0.0
[0.0.4-1]
- Initial RPM packaging for PostgreSQL RPM Repository
pg_repack
[1.4.6-3]
- Release bump - enable gating
[1.4.6-2]
- Rebuild
- Resolves:#1954442
[1.4.6-1]
- Rebase to upstream release 1.4.6
[1.4.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
[1.4.5-1]
- Initial packaging
postgres-decoderbufs
[0.10.0-2]
- Release bump for rebuild against libpq-12.1-3
* Wed Oct 09 2019 Patrik Novotny <panovotn@redhat.com - 0-10-0-1
- Initial release for upstream version 0.10.0
postgresql
[13.18-1]
- Update to 13.18
- Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pg_repack | 0:1.4.6-3.module+el8.9.0+90098+1560b6c2 |
| Oracle Linux · 8 | pgaudit | 0:1.5.0-1.module+el8.9.0+90098+1560b6c2 |
| Oracle Linux · 8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.9.0+90098+1560b6c2 |
| Oracle Linux · 8 | postgresql | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-contrib | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-docs | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-plperl | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-plpython3 | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-pltcl | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-server | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-server-devel | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-static | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-test | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-test-rpm-macros | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-upgrade | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
| Oracle Linux · 8 | postgresql-upgrade-devel | 0:13.18-1.module+el8.10.0+90452+3c12d786 |
Vulnerabilities 3
-
High 8.8
PostgreSQL PL/Perl environment variable changes execute arbitrary code
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database …
-
Medium 4.2
PostgreSQL row security below e.g. subqueries disregards user ID changes
Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where …
-
Medium 4.2
PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. The problem a…