p PatchFirst

ALSA-2024:10788

ALSA-2024:10788 · Important: postgresql:16 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978) * postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979) * postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system · database

Affected products and versions

  • pg_repack AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 1.5.1-1.module_el9.5.0+127+50ff03a9

    Update to 1.5.1-1.module_el9.5.0+127+50ff03a9

  • pg_repack AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 1.5.1-1.module_el9.5.0+128+1095dce2

    Update to 1.5.1-1.module_el9.5.0+128+1095dce2

  • pgaudit AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.0-1.module_el9.4.0+66+eb9878bc

    Update to 16.0-1.module_el9.4.0+66+eb9878bc

  • pgvector AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 0.6.2-1.module_el9.5.0+120+4533eb20

    Update to 0.6.2-1.module_el9.5.0+120+4533eb20

  • postgres-decoderbufs AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 2.4.0-1.Final.module_el9.4.0+66+eb9878bc

    Update to 2.4.0-1.Final.module_el9.4.0+66+eb9878bc

  • postgresql AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+127+50ff03a9

    Update to 16.6-1.module_el9.5.0+127+50ff03a9

  • postgresql AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+128+1095dce2

    Update to 16.6-1.module_el9.5.0+128+1095dce2

  • postgresql-contrib AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+128+1095dce2

    Update to 16.6-1.module_el9.5.0+128+1095dce2

  • postgresql-contrib AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+127+50ff03a9

    Update to 16.6-1.module_el9.5.0+127+50ff03a9

  • postgresql-docs AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+127+50ff03a9

    Update to 16.6-1.module_el9.5.0+127+50ff03a9

  • postgresql-docs AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+128+1095dce2

    Update to 16.6-1.module_el9.5.0+128+1095dce2

  • postgresql-plperl AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+127+50ff03a9

    Update to 16.6-1.module_el9.5.0+127+50ff03a9

  • postgresql-plpython3 AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+127+50ff03a9

    Update to 16.6-1.module_el9.5.0+127+50ff03a9

  • postgresql-plpython3 AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+128+1095dce2

    Update to 16.6-1.module_el9.5.0+128+1095dce2

  • postgresql-pltcl AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+128+1095dce2

    Update to 16.6-1.module_el9.5.0+128+1095dce2

  • postgresql-private-devel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+128+1095dce2

    Update to 16.6-1.module_el9.5.0+128+1095dce2

  • postgresql-private-devel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+127+50ff03a9

    Update to 16.6-1.module_el9.5.0+127+50ff03a9

  • postgresql-private-libs AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+127+50ff03a9

    Update to 16.6-1.module_el9.5.0+127+50ff03a9

  • postgresql-private-libs AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+128+1095dce2

    Update to 16.6-1.module_el9.5.0+128+1095dce2

  • postgresql-server AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+127+50ff03a9

    Update to 16.6-1.module_el9.5.0+127+50ff03a9

  • postgresql-server AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+128+1095dce2

    Update to 16.6-1.module_el9.5.0+128+1095dce2

  • postgresql-server-devel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+127+50ff03a9

    Update to 16.6-1.module_el9.5.0+127+50ff03a9

  • postgresql-server-devel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+128+1095dce2

    Update to 16.6-1.module_el9.5.0+128+1095dce2

  • postgresql-static AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 16.6-1.module_el9.5.0+127+50ff03a9

    Update to 16.6-1.module_el9.5.0+127+50ff03a9

Original sources

Check your server →