Incorrect privilege assignment in PostgreSQL - CVE-2024-10978

Vulnerability identifier: #VU100513

CSH Severity: Medium

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-10978

CWE-ID: CWE-266

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to escalate privileges within the application.

The vulnerability exists due to incorrect privilege assignment when application uses SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. A remote user can force the application to reset their role to a wrong user ID and view or change different rows from those intended.

PostgreSQL
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
Debian Linux
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Desktop 15 SP4
Gentoo Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
Galera for Ericsson 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Server 12 SP5 LTSS
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
Server Applications Module
Legacy Module
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
IBM Security QRadar Network Threat Analytics
OpenManage Network Integration (OMNI)
IBM Cloud Pak for Watson AIOps
Guardium Data Protection
Dell EMC VxRail Appliance
RSA Authentication Manager
IBM Business Automation Workflow
postgresql-client-9.5 (Ubuntu package)
postgresql-9.5 (Ubuntu package)
postgres-decoderbufs
pgaudit
pg_repack
postgresql-client-12 (Ubuntu package)
postgresql-12 (Ubuntu package)
postgresql-server
postgresql
postgresql-contrib
postgresql-plperl
postgresql-test-rpm-macros
postgresql-upgrade-devel
postgresql-upgrade
postgresql-test
postgresql-static
postgresql-server-devel
postgresql-pltcl
postgresql-plpython3
postgresql-docs
postgresql12-docs
postgresql12-debuginfo
postgresql12-pltcl
postgresql12-pltcl-debuginfo
postgresql12-plperl
postgresql12-contrib-debuginfo
postgresql12-plpython-debuginfo
postgresql12-server
postgresql12-debugsource
postgresql12
postgresql12-plpython
postgresql12-contrib
postgresql12-server-debuginfo
postgresql12-plperl-debuginfo
postgresql12-server-devel-debuginfo
postgresql12-devel
postgresql12-devel-debuginfo
postgresql12-server-devel
postgresql12-llvmjit-debuginfo
postgresql12-llvmjit-devel
postgresql12-llvmjit
postgresql12-test
libpq-devel
libpq-debugsource
libpq-debuginfo
postgresql-debugsource
libpq
postgresql-debuginfo
postgresql-private-libs
postgresql-private-devel
postgresql-llvmjit
postgresql (Red Hat package)
postgresql13-plperl-debuginfo
postgresql13-debugsource
postgresql13-server-debuginfo
postgresql13-plperl
postgresql13-plpython
postgresql13-contrib
postgresql13-contrib-debuginfo
postgresql13-server
postgresql13-docs
postgresql13-debuginfo
postgresql13
postgresql13-plpython-debuginfo
postgresql13-pltcl
postgresql13-pltcl-debuginfo
postgresql13-test
postgresql13-llvmjit-debuginfo
postgresql13-llvmjit-devel
postgresql13-llvmjit
postgresql13-server-devel
postgresql13-devel
postgresql13-devel-debuginfo
postgresql13-server-devel-debuginfo
postgresql-13-pltcl
postgresql-13
postgresql-13-contrib
postgresql-13-debuginfo
postgresql-13-debugsource
postgresql-13-docs
postgresql-13-llvmjit
postgresql-13-plperl
postgresql-13-plpython3
postgresql-13-private-devel
postgresql-13-private-libs
postgresql-13-server
postgresql-13-server-devel
postgresql-13-static
postgresql-13-test
postgresql-13-test-rpm-macros
postgresql-client-14 (Ubuntu package)
postgresql-14 (Ubuntu package)
postgresql14-plpython
postgresql14-docs
postgresql14-server
postgresql14-plperl
postgresql14-contrib
postgresql14-plpython-debuginfo
postgresql14-contrib-debuginfo
postgresql14-pltcl-debuginfo
postgresql14-plperl-debuginfo
postgresql14-pltcl
postgresql14-debuginfo
postgresql14
postgresql14-debugsource
postgresql14-server-debuginfo
postgresql14-devel-debuginfo
postgresql14-test
postgresql14-server-devel-debuginfo
postgresql14-llvmjit-devel
postgresql14-server-devel
postgresql14-llvmjit
postgresql14-devel
postgresql14-llvmjit-debuginfo
postgresql-15 (Debian package)
postgresql15-plpython-debuginfo
postgresql15
postgresql15-server-debuginfo
postgresql15-contrib-debuginfo
postgresql15-debugsource
postgresql15-docs
postgresql15-plperl-debuginfo
postgresql15-plperl
postgresql15-pltcl
postgresql15-server
postgresql15-debuginfo
postgresql15-plpython
postgresql15-pltcl-debuginfo
postgresql15-contrib
postgresql15-server-devel
postgresql15-devel
postgresql15-devel-debuginfo
postgresql15-test
postgresql15-llvmjit-debuginfo
postgresql15-llvmjit-devel
postgresql15-server-devel-debuginfo
postgresql15-llvmjit
postgresql-client-16 (Ubuntu package)
postgresql-16 (Ubuntu package)
postgresql16-plperl
postgresql16-pltcl-debuginfo
postgresql16-debugsource
postgresql16-docs
postgresql16-server-debuginfo
postgresql16-plpython-debuginfo
postgresql16-server
postgresql16-contrib-debuginfo
postgresql16-pltcl
postgresql16-devel
postgresql16-plperl-debuginfo
postgresql16-plpython
postgresql16-debuginfo
postgresql16
postgresql16-contrib
postgresql16-devel-debuginfo
postgresql16-server-devel-debuginfo
postgresql16-server-devel
postgresql16-llvmjit-debuginfo
postgresql16-llvmjit
postgresql16-llvmjit-devel
postgresql16-test
libecpg6
libecpg6-debuginfo
libpq5-debuginfo
libecpg6-32bit
libpq5-32bit
libpq5-debuginfo-32bit
libpq5
libecpg6-debuginfo-32bit
postgresql17-contrib-debuginfo
postgresql17-plperl
postgresql17-server-debuginfo
postgresql17-server-devel-debuginfo
libpq5-32bit-debuginfo
postgresql17-plpython
postgresql17-debuginfo
libecpg6-32bit-debuginfo
postgresql17-llvmjit-debuginfo
postgresql17-contrib
postgresql17-docs
postgresql17-devel-debuginfo
postgresql17-test
postgresql17-llvmjit
postgresql17-llvmjit-devel
postgresql17-server-devel
postgresql17
postgresql17-devel
postgresql17-debugsource
postgresql17-plpython-debuginfo
postgresql17-pltcl-debuginfo
postgresql17-plperl-debuginfo
postgresql17-pltcl
postgresql17-server
libpq5-64bit
libecpg6-64bit-debuginfo
libpq5-64bit-debuginfo
postgresql17-devel-mini-debuginfo
postgresql17-mini-debugsource
libecpg6-64bit
postgresql17-devel-mini
postgresql-devel
postgresql-plpython
postgresql-llvmjit-devel
Juniper Secure Analytics (JSA)
Cloud Tiering Appliance

Install updates from vendor's website.

PostgreSQL - addressed in versions 12.21, 13.17, 14.14, 15.9, 16.5, 17.1
IBM Security QRadar Network Threat Analytics - update to 1.4.3
Dell EMC VxRail Appliance - addressed in versions 7.0.533, 8.320, 8.321
RSA Authentication Manager - update to 8.7 SP2 Patch 6
IBM Business Automation Workflow - addressed in versions 24.0.0-IF007, 24.0.1-IF005, 25.0.0-IF002
postgresql-client-9.5 (Ubuntu package) - update to Ubuntu Pro
postgresql-9.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
postgres-decoderbufs - addressed in versions 0.10.0-2, 1.9.7-1.Final
pgaudit - addressed in versions 1.4.0-7, 1.5.0-1, 1.7.0-1
pg_repack - addressed in versions 1.4.6-3, 1.4.8-1
OpenManage Network Integration (OMNI) - update to 3.7
IBM Cloud Pak for Watson AIOps - update to 4.8.1
Juniper Secure Analytics (JSA) - update to 7.5.0 UP11 IF03
Guardium Data Protection - addressed in versions 12.0p35, 12.0p115
postgresql-client-12 (Ubuntu package) - update to 12.22-0ubuntu0.20.04.1
postgresql-12 (Ubuntu package) - update to 12.22-0ubuntu0.20.04.1
postgresql-server - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-contrib - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-plperl - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-test-rpm-macros - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-upgrade-devel - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-upgrade - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-test - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-static - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-server-devel - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-pltcl - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-plpython3 - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql-docs - addressed in versions 12.22-1.0.1, 13.18-1.0.1, 15.10-1.0.1
postgresql12-docs - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-pltcl - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-pltcl-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-plperl - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-contrib-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-plpython-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-server - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-debugsource - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12 - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-plpython - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-contrib - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-server-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-plperl-debuginfo - addressed in versions 12.22-3.63.1, 12.22-150200.8.66.1
postgresql12-server-devel-debuginfo - update to 12.22-150200.8.66.1
postgresql12-devel - update to 12.22-150200.8.66.1
postgresql12-devel-debuginfo - update to 12.22-150200.8.66.1
postgresql12-server-devel - update to 12.22-150200.8.66.1
postgresql12-llvmjit-debuginfo - update to 12.22-150200.8.66.1
postgresql12-llvmjit-devel - update to 12.22-150200.8.66.1
postgresql12-llvmjit - update to 12.22-150200.8.66.1
postgresql12-test - update to 12.22-150200.8.66.1
Cloud Tiering Appliance - update to 13.2.0.2.33
postgresql - addressed in versions 13.17-1, 15.9-1
libpq-devel - addressed in versions 13.17-1, 15.9-1
libpq-debugsource - addressed in versions 13.17-1, 15.9-1
libpq-debuginfo - addressed in versions 13.17-1, 15.9-1
postgresql-server-devel - addressed in versions 13.17-1, 15.9-1
postgresql-debugsource - addressed in versions 13.17-1, 15.9-1
libpq - addressed in versions 13.17-1, 15.9-1
postgresql-debuginfo - addressed in versions 13.17-1, 15.9-1
postgresql-contrib - addressed in versions 13.17-1, 15.9-1
postgresql-test-rpm-macros - addressed in versions 13.17-1, 15.9-1
postgresql-test - addressed in versions 13.17-1, 15.9-1
postgresql-static - addressed in versions 13.17-1, 15.9-1
postgresql-docs - addressed in versions 13.17-1, 15.9-1
postgresql-server - addressed in versions 13.17-1, 15.9-1
postgresql-private-libs - addressed in versions 13.17-1, 15.9-1
postgresql-private-devel - addressed in versions 13.17-1, 15.9-1
postgresql-pltcl - addressed in versions 13.17-1, 15.9-1
postgresql-plpython3 - addressed in versions 13.17-1, 15.9-1
postgresql-plperl - addressed in versions 13.17-1, 15.9-1
postgresql-llvmjit - addressed in versions 13.17-1, 15.9-1
postgresql (Red Hat package) - update to 13.18-1.el9_5
postgresql13-plperl-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-debugsource - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-server-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-plperl - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-plpython - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-contrib - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-contrib-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-server - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-docs - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13 - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-plpython-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-pltcl - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-pltcl-debuginfo - addressed in versions 13.18-3.55.2, 13.18-150200.5.64.1
postgresql13-test - update to 13.18-150200.5.64.1
postgresql13-llvmjit-debuginfo - update to 13.18-150200.5.64.1
postgresql13-llvmjit-devel - update to 13.18-150200.5.64.1
postgresql13-llvmjit - update to 13.18-150200.5.64.1
postgresql13-server-devel - update to 13.18-150200.5.64.1
postgresql13-devel - update to 13.18-150200.5.64.1
postgresql13-devel-debuginfo - update to 13.18-150200.5.64.1
postgresql13-server-devel-debuginfo - update to 13.18-150200.5.64.1
postgresql-13-pltcl - update to 13.20-1
postgresql-13 - update to 13.20-1
postgresql-13-contrib - update to 13.20-1
postgresql-13-debuginfo - update to 13.20-1
postgresql-13-debugsource - update to 13.20-1
postgresql-13-docs - update to 13.20-1
postgresql-13-llvmjit - update to 13.20-1
postgresql-13-plperl - update to 13.20-1
postgresql-13-plpython3 - update to 13.20-1
postgresql-13-private-devel - update to 13.20-1
postgresql-13-private-libs - update to 13.20-1
postgresql-13-server - update to 13.20-1
postgresql-13-server-devel - update to 13.20-1
postgresql-13-static - update to 13.20-1
postgresql-13-test - update to 13.20-1
postgresql-13-test-rpm-macros - update to 13.20-1
postgresql-client-14 (Ubuntu package) - update to 14.15-0ubuntu0.22.04.1
postgresql-14 (Ubuntu package) - update to 14.15-0ubuntu0.22.04.1
postgresql14-plpython - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-docs - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-server - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-plperl - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-contrib - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-plpython-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-contrib-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-pltcl-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-plperl-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-pltcl - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14 - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-debugsource - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-server-debuginfo - addressed in versions 14.15-3.49.1, 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-devel-debuginfo - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-test - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-server-devel-debuginfo - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-llvmjit-devel - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-server-devel - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-llvmjit - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-devel - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql14-llvmjit-debuginfo - addressed in versions 14.15-150200.5.50.1, 14.15-150600.16.9.1
postgresql-15 (Debian package) - update to 15.9-0+deb12u1
postgresql-private-libs - update to 15.10-1.0.1
postgresql-private-devel - update to 15.10-1.0.1
postgresql15-plpython-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15 - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-server-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-contrib-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-debugsource - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-docs - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-plperl-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-plperl - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-pltcl - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-server - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-plpython - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-pltcl-debuginfo - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-contrib - addressed in versions 15.10-3.33.1, 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-server-devel - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-devel - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-devel-debuginfo - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-test - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-llvmjit-debuginfo - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-llvmjit-devel - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-server-devel-debuginfo - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql15-llvmjit - addressed in versions 15.10-150200.5.33.1, 15.10-150600.16.9.1
postgresql-client-16 (Ubuntu package) - addressed in versions 16.6-0ubuntu0.24.04.1, 16.6-0ubuntu0.24.10.1
postgresql-16 (Ubuntu package) - addressed in versions 16.6-0ubuntu0.24.04.1, 16.6-0ubuntu0.24.10.1
postgresql16-plperl - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-pltcl-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-debugsource - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-docs - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-server-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-plpython-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-server - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-contrib-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-pltcl - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-devel - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-plperl-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-plpython - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16 - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-contrib - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-devel-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-server-devel-debuginfo - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-server-devel - addressed in versions 16.6-3.21.1, 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-llvmjit-debuginfo - addressed in versions 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-llvmjit - addressed in versions 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-llvmjit-devel - addressed in versions 16.6-150200.5.21.1, 16.6-150600.16.10.1
postgresql16-test - addressed in versions 16.6-150200.5.21.1, 16.6-150600.16.10.1
libecpg6 - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libecpg6-debuginfo - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libpq5-debuginfo - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libecpg6-32bit - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libpq5-32bit - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libpq5-debuginfo-32bit - update to 17.2-3.5.1
libpq5 - addressed in versions 17.2-3.5.1, 17.2-150200.5.5.1, 17.2-150600.13.5.1
libecpg6-debuginfo-32bit - update to 17.2-3.5.1
postgresql17-contrib-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-plperl - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-server-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-server-devel-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
libpq5-32bit-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-plpython - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
libecpg6-32bit-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-llvmjit-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-contrib - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-docs - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-devel-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-test - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-llvmjit - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-llvmjit-devel - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-server-devel - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17 - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-devel - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-debugsource - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-plpython-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-pltcl-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-plperl-debuginfo - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-pltcl - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
postgresql17-server - addressed in versions 17.2-150200.5.5.1, 17.2-150600.13.5.1
libpq5-64bit - update to 17.2-150600.13.5.1
libecpg6-64bit-debuginfo - update to 17.2-150600.13.5.1
libpq5-64bit-debuginfo - update to 17.2-150600.13.5.1
postgresql17-devel-mini-debuginfo - update to 17.2-150600.13.5.1
postgresql17-mini-debugsource - update to 17.2-150600.13.5.1
libecpg6-64bit - update to 17.2-150600.13.5.1
postgresql17-devel-mini - update to 17.2-150600.13.5.1
postgresql-devel - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-contrib - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-server - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-plperl - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-plpython - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-docs - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-pltcl - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-server-devel - addressed in versions 17-4.29.1, 17-150200.4.30.1, 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-llvmjit - addressed in versions 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-llvmjit-devel - addressed in versions 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1
postgresql-test - addressed in versions 17-150300.10.27.1, 17-150400.4.18.1, 17-150500.10.9.1, 17-150600.17.6.1

• https://www.postgresql.org/support/security/CVE-2024-10978/

• Multiple vulnerabilities in PostgreSQL
• Debian update for postgresql-15
• openEuler 22.03 LTS SP1 update for postgresql
• openEuler 22.03 LTS SP3 update for postgresql
• openEuler 22.03 LTS SP4 update for postgresql
• openEuler 24.03 LTS update for postgresql
• openEuler 22.03 LTS SP4 update for libpq
• openEuler 24.03 LTS update for libpq
• openEuler 22.03 LTS SP1 update for libpq
• openEuler 22.03 LTS SP3 update for libpq
• SUSE update for postgresql, postgresql16, postgresql17
• SUSE update for postgresql, postgresql16, postgresql17
• SUSE update for postgresql12
• SUSE update for postgresql15
• SUSE update for postgresql12
• SUSE update for postgresql14
• SUSE update for postgresql15
• SUSE update for postgresql13
• SUSE update for postgresql14
• Ubuntu update for postgresql-12
• Red Hat Enterprise Linux 8 update for the postgresql:12 module
• Red Hat Enterprise Linux 9 update for the postgresql:15 module
• Red Hat Enterprise Linux 9 update for the postgresql:16 module
• Red Hat Enterprise Linux 9 update for postgresql
• Red Hat Enterprise Linux 8 update for the postgresql:16 module
• Red Hat Enterprise Linux 8 update for the postgresql:15 module
• Red Hat Enterprise Linux 8 update for the postgresql:13 module
• SUSE update for postgresql14
• SUSE update for postgresql13
• SUSE update for postgresql15
• SUSE update for postgresql, postgresql16, postgresql17
• Gentoo update for PostgreSQL
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Ubuntu update for postgresql-9.5
• Anolis OS update for postgresql:12 module
• Anolis OS update for postgresql:13 module
• Anolis OS update for postgresql:15 module
• openEuler 20.03 LTS SP4 update for postgresql-13
• Multiple vulnerabilities in Dell VxRail Appliance
• Multiple vulnerabilities in Dell VxRail Appliance 7.x
• Dell VxRail Appliance 8.x update for third-party components
• Multiple vulnerabilities in IBM Guardium Data Protection
• RSA Authentication Manager update for third-party components
• Juniper Secure Analytics update for third-party components
• Dell Cloud Tiering Appliance/VE update for third-party components
• SUSE update for postgresql, postgresql16, postgresql17
• Multiple vulnerabilities in IBM Business Automation Workflow
• Multiple vulnerabilities in IBM Network Threat Analytics