RHSA-2024:1437HighCVSS 8.0

Red Hat Security Advisory: postgresql security update

Published
March 20, 2024
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2024-0985 →

📋 Description

CVE-2024-0985 — postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL

🎯 Affected products135

  • Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • pgaudit-0:1.5.0-1.module+el8.4.0+8873+b821c30a.ppc64le (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • pgaudit-0:1.5.0-1.module+el8.4.0+8873+b821c30a.src (postgresql:13) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • pgaudit-0:1.5.0-1.module+el8.4.0+8873+b821c30a.src (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • pgaudit-0:1.5.0-1.module+el8.4.0+8873+b821c30a.src (postgresql:13) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • pgaudit-0:1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • pgaudit-0:1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • pgaudit-0:1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • pgaudit-debuginfo-0:1.5.0-1.module+el8.4.0+8873+b821c30a.ppc64le (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • pgaudit-debuginfo-0:1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • pgaudit-debuginfo-0:1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • pgaudit-debuginfo-0:1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • pgaudit-debugsource-0:1.5.0-1.module+el8.4.0+8873+b821c30a.ppc64le (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • pgaudit-debugsource-0:1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • pgaudit-debugsource-0:1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • pgaudit-debugsource-0:1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.4.0+8873+b821c30a.ppc64le (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.4.0+8873+b821c30a.src (postgresql:13) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.4.0+8873+b821c30a.src (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.4.0+8873+b821c30a.src (postgresql:13) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • postgres-decoderbufs-0:0.10.0-2.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • postgres-decoderbufs-debuginfo-0:0.10.0-2.module+el8.4.0+8873+b821c30a.ppc64le (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • postgres-decoderbufs-debuginfo-0:0.10.0-2.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • postgres-decoderbufs-debuginfo-0:0.10.0-2.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • postgres-decoderbufs-debuginfo-0:0.10.0-2.module+el8.4.0+8873+b821c30a.x86_64 (postgresql:13) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • postgres-decoderbufs-debugsource-0:0.10.0-2.module+el8.4.0+8873+b821c30a.ppc64le (postgresql:13) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • +105 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)