Summary
[13.16-1.0.1]
- Remove non ASCII character from changelog date
[13.16-1]
- Update to 13.16
[13.14-2]
- Remove /var/run/postgresql
- Related: RHEL-25756
[13.14-1]
- Update to 13.14
- Fix CVE-2024-0985
[13.13-1]
- Update to 13.13
- Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
- Resolves: RHEL-5567
[13.11-1]
- Update to 13.11
- Resolves: #2207935
* Tue Feb 28 2023 Filip Janus <fjanus@redhat.com> - 13.10-1
- Update to 13.10
- Resolves: #2114734
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | postgresql | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-contrib | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-docs | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-plperl | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-plpython3 | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-pltcl | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-private-devel | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-private-libs | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-server | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-server-devel | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-static | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-test | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-upgrade | 0:13.16-1.0.1.el9_4 |
| Oracle Linux · 9 | postgresql-upgrade-devel | 0:13.16-1.0.1.el9_4 |
Vulnerabilities 1
-
High 8.8
PostgreSQL relation replacement during pg_dump executes arbitrary SQL
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or …