Red Hat Security Advisory: postgresql:15 security update

Fixed packages 37

Vulnerabilities 5

• High 8.8
  CVE-2023-5869

  Postgresql: buffer overrun from integer overflow in array modification

  A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user c…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Dec 10, 2023
• High 7.5
  CVE-2023-39417

  Postgresql: extension script @substitutions@ within quoting allow sql injection

  IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Aug 11, 2023
• Medium 4.3
  CVE-2023-5868

  Postgresql: memory disclosure in aggregate function calls

  A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type d…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Dec 10, 2023
• Low 3.1
  CVE-2023-39418

  Postgresql: merge fails to enforce update or select row security policies

  A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user coul…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Alpine
  Aug 11, 2023
• Low 2.2
  CVE-2023-5870

  Postgresql: role pg_signal_backend can signal certain superuser processes.

  A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Dec 10, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2228111
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2228112
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2247168
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2247169
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2247170
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7883.json
• report
  https://access.redhat.com/security/cve/CVE-2023-5868
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-5868
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-5868
• article
  https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
• article
  https://www.postgresql.org/support/security/CVE-2023-5868/
• report
  https://access.redhat.com/security/cve/CVE-2023-5869
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-5869
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-5869
• article
  https://www.postgresql.org/support/security/CVE-2023-5869/
• report
  https://access.redhat.com/security/cve/CVE-2023-5870
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-5870
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-5870
• article
  https://www.postgresql.org/support/security/CVE-2023-5870/
• report
  https://access.redhat.com/security/cve/CVE-2023-39417
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-39417
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-39417
• article
  https://www.postgresql.org/support/security/CVE-2023-39417
• report
  https://access.redhat.com/security/cve/CVE-2023-39418
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-39418
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-39418
• article
  https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=cb2ae5741f2458a474ed3c31458d242e678ff229
• article
  https://www.postgresql.org/support/security/CVE-2023-39418/