Fixed packages 25
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-contrib | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-contrib-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-debugsource | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-docs | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-docs-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-plperl | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-plperl-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-plpython3 | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-plpython3-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-pltcl | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-pltcl-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-server | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-server-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-server-devel | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-server-devel-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-static | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-test | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-test-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-test-rpm-macros | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-upgrade | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-upgrade-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-upgrade-devel | 0:10.23-3.module+el8.8.0+20830+539934c1 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | postgresql-upgrade-devel-debuginfo | 0:10.23-3.module+el8.8.0+20830+539934c1 |
Vulnerabilities 1
-
High 8.8
Postgresql: buffer overrun from integer overflow in array modification
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user c…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2247169
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7786.json
-
report
https://access.redhat.com/security/cve/CVE-2023-5869
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-5869
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-5869
-
article
https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
-
article
https://www.postgresql.org/support/security/CVE-2023-5869/