Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-contrib | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-contrib-syspaths | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-debuginfo | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-devel | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-docs | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-libs | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-plperl | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-plpython | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-pltcl | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-server | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-server-syspaths | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-static | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-syspaths | 0:10.23-2.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | rh-postgresql10-postgresql-test | 0:10.23-2.el7 |
Vulnerabilities 1
-
High 8.8
Postgresql: buffer overrun from integer overflow in array modification
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user c…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2247169
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7771.json
-
report
https://access.redhat.com/security/cve/CVE-2023-5869
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-5869
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-5869
-
article
https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
-
article
https://www.postgresql.org/support/security/CVE-2023-5869/