RHSA-2024:1428HighCVSS 8.0

Red Hat Security Advisory: postgresql security update

Published
March 19, 2024
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2024-0985 →

📋 Description

CVE-2024-0985 — postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL

🎯 Affected products102

  • Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-0:10.23-4.module+el8.8.0+21372+7f1ca650.aarch64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-0:10.23-4.module+el8.8.0+21372+7f1ca650.ppc64le (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-0:10.23-4.module+el8.8.0+21372+7f1ca650.s390x (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-0:10.23-4.module+el8.8.0+21372+7f1ca650.src (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-0:10.23-4.module+el8.8.0+21372+7f1ca650.x86_64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-contrib-0:10.23-4.module+el8.8.0+21372+7f1ca650.aarch64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-contrib-0:10.23-4.module+el8.8.0+21372+7f1ca650.ppc64le (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-contrib-0:10.23-4.module+el8.8.0+21372+7f1ca650.s390x (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-contrib-0:10.23-4.module+el8.8.0+21372+7f1ca650.x86_64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-contrib-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.aarch64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-contrib-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.ppc64le (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-contrib-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.s390x (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-contrib-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.x86_64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.aarch64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.ppc64le (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.s390x (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.x86_64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-debugsource-0:10.23-4.module+el8.8.0+21372+7f1ca650.aarch64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-debugsource-0:10.23-4.module+el8.8.0+21372+7f1ca650.ppc64le (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-debugsource-0:10.23-4.module+el8.8.0+21372+7f1ca650.s390x (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-debugsource-0:10.23-4.module+el8.8.0+21372+7f1ca650.x86_64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-docs-0:10.23-4.module+el8.8.0+21372+7f1ca650.aarch64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-docs-0:10.23-4.module+el8.8.0+21372+7f1ca650.ppc64le (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-docs-0:10.23-4.module+el8.8.0+21372+7f1ca650.s390x (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-docs-0:10.23-4.module+el8.8.0+21372+7f1ca650.x86_64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-docs-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.aarch64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-docs-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.ppc64le (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-docs-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.s390x (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • postgresql-docs-debuginfo-0:10.23-4.module+el8.8.0+21372+7f1ca650.x86_64 (postgresql:10) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)
  • +72 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)