Fixed packages 25
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-contrib | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-contrib-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-debugsource | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-docs | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-docs-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-plperl | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-plperl-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-plpython3 | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-plpython3-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-pltcl | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-pltcl-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-server | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-server-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-server-devel | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-server-devel-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-static | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-test | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-test-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-test-rpm-macros | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-upgrade | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-upgrade-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-upgrade-devel | 0:10.21-3.module+el8.1.0+20812+774a9597 |
| Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream | postgresql-upgrade-devel-debuginfo | 0:10.21-3.module+el8.1.0+20812+774a9597 |
Vulnerabilities 1
-
High 8.8
Postgresql: buffer overrun from integer overflow in array modification
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user c…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2247169
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7778.json
-
report
https://access.redhat.com/security/cve/CVE-2023-5869
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-5869
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-5869
-
article
https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
-
article
https://www.postgresql.org/support/security/CVE-2023-5869/