Improper Privilege Management in PostgreSQL - CVE-2024-0985

Vulnerability identifier: #VU86275

CSH Severity: Medium

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-0985

CWE-ID: CWE-269

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to escalate privileges within the database.

The vulnerability exists due to late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY. A remote user who is an object creator can execute arbitrary SQL functions as the command issuer.

PostgreSQL
Gentoo Linux
Amazon Linux AMI
Debian Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
Galera for Ericsson 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Basesystem Module
Server Applications Module
Legacy Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
IBM Security QRadar Network Threat Analytics
Storage Copy Data Management
PowerStore X
PowerStore T
Storage Protect Plus Server
EMC Cloud Tiering Appliance
NetWorker Management Console (NMC)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
postgresql-9.5 (Ubuntu package)
postgresql-client-9.5 (Ubuntu package)
postgres-decoderbufs
pgaudit
pg_repack
rh-postgresql10-postgresql (Red Hat package)
postgresql-contrib
postgresql
postgresql-docs
postgresql-plperl
postgresql-plpython3
postgresql-pltcl
postgresql-server
postgresql-server-devel
postgresql-static
postgresql-test
postgresql-test-rpm-macros
postgresql-upgrade
postgresql-upgrade-devel
postgresql-client-12 (Ubuntu package)
postgresql-12 (Ubuntu package)
rh-postgresql12-postgresql (Red Hat package)
postgresql12-contrib-debuginfo
postgresql12-debugsource
postgresql12-devel-debuginfo
postgresql12-devel
postgresql12-server-devel
postgresql12-server-devel-debuginfo
postgresql12
postgresql12-plperl
postgresql12-pltcl
postgresql12-pltcl-debuginfo
postgresql12-plpython-debuginfo
postgresql12-plpython
postgresql12-contrib
postgresql12-server-debuginfo
postgresql12-server
postgresql12-debuginfo
postgresql12-plperl-debuginfo
postgresql12-docs
postgresql12-llvmjit-debuginfo
postgresql12-llvmjit
postgresql12-test
postgresql12-llvmjit-devel
postgresql-13 (Debian package)
rh-postgresql13-postgresql (Red Hat package)
postgresql (Red Hat package)
postgresql13-server-devel
postgresql13-plpython
postgresql13-pltcl
postgresql13-server
postgresql13-plperl-debuginfo
postgresql13-plperl
postgresql13-server-debuginfo
postgresql13-contrib
postgresql13-docs
postgresql13
postgresql13-debuginfo
postgresql13-plpython-debuginfo
postgresql13-contrib-debuginfo
postgresql13-pltcl-debuginfo
postgresql13-server-devel-debuginfo
postgresql13-devel
postgresql13-devel-debuginfo
postgresql13-debugsource
postgresql13-test
postgresql13-llvmjit-debuginfo
postgresql13-llvmjit
postgresql13-llvmjit-devel
libpq
libpq-debuginfo
libpq-debugsource
libpq-devel
postgresql-13-test-rpm-macros
postgresql-13
postgresql-13-debugsource
postgresql-13-debuginfo
postgresql-13-contrib
postgresql-13-server
postgresql-13-server-devel
postgresql-13-static
postgresql-13-test
postgresql-13-private-libs
postgresql-13-private-devel
postgresql-13-pltcl
postgresql-13-plpython3
postgresql-13-plperl
postgresql-13-llvmjit
postgresql-13-docs
postgresql-14 (Ubuntu package)
postgresql-client-14 (Ubuntu package)
postgresql14
postgresql14-server-devel-debuginfo
postgresql14-devel-debuginfo
postgresql14-debugsource
postgresql14-devel
postgresql14-server-devel
postgresql14-server-debuginfo
postgresql14-pltcl-debuginfo
postgresql14-plperl
postgresql14-server
postgresql14-plperl-debuginfo
postgresql14-debuginfo
postgresql14-pltcl
postgresql14-contrib
postgresql14-contrib-debuginfo
postgresql14-plpython
postgresql14-plpython-debuginfo
postgresql14-docs
postgresql14-llvmjit-devel
postgresql14-test
postgresql14-llvmjit
postgresql14-llvmjit-debuginfo
postgresql-private-libs
postgresql-private-devel
postgresql-client-15 (Ubuntu package)
postgresql-15 (Ubuntu package)
postgresql-15 (Debian package)
postgresql15
postgresql15-devel-debuginfo
postgresql15-server-devel-debuginfo
postgresql15-docs
postgresql15-server-debuginfo
postgresql15-pltcl-debuginfo
postgresql15-debuginfo
postgresql15-plperl-debuginfo
postgresql15-debugsource
postgresql15-server
postgresql15-contrib
postgresql15-contrib-debuginfo
postgresql15-plpython
postgresql15-plpython-debuginfo
postgresql15-pltcl
postgresql15-devel
postgresql15-server-devel
postgresql15-plperl
postgresql15-llvmjit
postgresql15-llvmjit-debuginfo
postgresql15-llvmjit-devel
postgresql15-test
postgresql16-plpython
postgresql16-docs
postgresql16-plperl-debuginfo
postgresql16-pltcl
postgresql16-debuginfo
libpq5
postgresql16-server-debuginfo
postgresql16-contrib
postgresql16-contrib-debuginfo
postgresql16-server
postgresql16-plperl
libpq5-debuginfo
postgresql16-pltcl-debuginfo
postgresql16-plpython-debuginfo
postgresql16-debugsource
libecpg6-debuginfo
postgresql16
libecpg6
postgresql16-server-devel
postgresql16-devel-debuginfo
postgresql16-devel
postgresql16-server-devel-debuginfo
libpq5-32bit
libpq5-debuginfo-32bit
libecpg6-32bit
libecpg6-debuginfo-32bit
libpq5-32bit-debuginfo
postgresql16-mini-debugsource
postgresql16-devel-mini-debuginfo
postgresql16-test
postgresql16-llvmjit-debuginfo
postgresql16-devel-mini
postgresql16-llvmjit-devel
postgresql16-llvmjit
libecpg6-32bit-debuginfo
IBM Security Guardium
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Sterling Connect:Direct Web Services
Tanzu Greenplum
Azure Stack
Dell NetWorker Virtual Edition
IBM Observability with Instana
IBM Storage Scale System
Juniper Secure Analytics (JSA)

Install updates from vendor's website.

PostgreSQL - addressed in versions 12.18, 13.14, 14.11, 15.6, 16.2
IBM Security QRadar Network Threat Analytics - update to 1.4.3
postgresql-9.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
postgresql-client-9.5 (Ubuntu package) - update to Ubuntu Pro
postgres-decoderbufs - addressed in versions 0.10.0-2, 1.9.7-1.Final
pgaudit - addressed in versions 1.4.0-7, 1.5.0-1, 1.7.0-1
pg_repack - addressed in versions 1.4.6-3, 1.4.8-1
Storage Copy Data Management - update to 2.2.23.1
PowerStore X - update to 3.2.1.4-2386214
PowerStore T - update to 4.0.0.2-2365061
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.5
IBM Sterling Connect:Direct Web Services - addressed in versions 6.1.0.24, 6.2.0.23, 6.3.0.7
IBM Storage Scale System - addressed in versions 6.1.9.3, 6.2.0.0
Tanzu Greenplum - update to 7.4.0
Juniper Secure Analytics (JSA) - update to 7.5.0 UP11 IF03
Storage Protect Plus Server - update to 10.1.16.3
rh-postgresql10-postgresql (Red Hat package) - update to 10.23-3.el7
postgresql-contrib - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-docs - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-plperl - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-plpython3 - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-pltcl - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-server - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-server-devel - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-static - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-test - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-test-rpm-macros - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-upgrade - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
postgresql-upgrade-devel - addressed in versions 10.23-4.0.1, 12.18-1.0.1, 13.14-1.0.1, 15.5-2, 15.6-1.0.1
Azure Stack - update to 10.2402
postgresql-client-12 (Ubuntu package) - update to 12.18-0ubuntu0.20.04.1
postgresql-12 (Ubuntu package) - update to 12.18-0ubuntu0.20.04.1
rh-postgresql12-postgresql (Red Hat package) - update to 12.18-1.el7
postgresql12-contrib-debuginfo - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-debugsource - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-devel-debuginfo - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-devel - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-server-devel - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-server-devel-debuginfo - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12 - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-plperl - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-pltcl - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-pltcl-debuginfo - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-plpython-debuginfo - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-plpython - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-contrib - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-server-debuginfo - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-server - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-debuginfo - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-plperl-debuginfo - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-docs - addressed in versions 12.18-3.52.1, 12.18-150200.8.57.1
postgresql12-llvmjit-debuginfo - update to 12.18-150200.8.57.1
postgresql12-llvmjit - update to 12.18-150200.8.57.1
postgresql12-test - update to 12.18-150200.8.57.1
postgresql12-llvmjit-devel - update to 12.18-150200.8.57.1
EMC Cloud Tiering Appliance - update to 13.2.0.2.29
postgresql-13 (Debian package) - update to 13.14-0+deb11u1
rh-postgresql13-postgresql (Red Hat package) - update to 13.14-1.el7
postgresql (Red Hat package) - addressed in versions 13.14-1.el9_0, 13.14-1.el9_2, 13.14-1.el9_3
postgresql13-server-devel - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-plpython - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-pltcl - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-server - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-plperl-debuginfo - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-plperl - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-server-debuginfo - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-contrib - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-docs - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13 - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-debuginfo - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-plpython-debuginfo - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-contrib-debuginfo - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-pltcl-debuginfo - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-server-devel-debuginfo - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-devel - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-devel-debuginfo - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-debugsource - addressed in versions 13.14-3.46.1, 13.14-150200.5.53.1
postgresql13-test - update to 13.14-150200.5.53.1
postgresql13-llvmjit-debuginfo - update to 13.14-150200.5.53.1
postgresql13-llvmjit - update to 13.14-150200.5.53.1
postgresql13-llvmjit-devel - update to 13.14-150200.5.53.1
libpq - addressed in versions 13.17-1, 15.9-1
libpq-debuginfo - addressed in versions 13.17-1, 15.9-1
libpq-debugsource - addressed in versions 13.17-1, 15.9-1
libpq-devel - addressed in versions 13.17-1, 15.9-1
postgresql-13-test-rpm-macros - update to 13.20-1
postgresql-13 - update to 13.20-1
postgresql-13-debugsource - update to 13.20-1
postgresql-13-debuginfo - update to 13.20-1
postgresql-13-contrib - update to 13.20-1
postgresql-13-server - update to 13.20-1
postgresql-13-server-devel - update to 13.20-1
postgresql-13-static - update to 13.20-1
postgresql-13-test - update to 13.20-1
postgresql-13-private-libs - update to 13.20-1
postgresql-13-private-devel - update to 13.20-1
postgresql-13-pltcl - update to 13.20-1
postgresql-13-plpython3 - update to 13.20-1
postgresql-13-plperl - update to 13.20-1
postgresql-13-llvmjit - update to 13.20-1
postgresql-13-docs - update to 13.20-1
postgresql-14 (Ubuntu package) - update to 14.11-0ubuntu0.22.04.1
postgresql-client-14 (Ubuntu package) - update to 14.11-0ubuntu0.22.04.1
postgresql14 - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-server-devel-debuginfo - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-devel-debuginfo - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-debugsource - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-devel - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-server-devel - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-server-debuginfo - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-pltcl-debuginfo - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-plperl - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-server - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-plperl-debuginfo - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-debuginfo - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-pltcl - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-contrib - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-contrib-debuginfo - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-plpython - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-plpython-debuginfo - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-docs - addressed in versions 14.11-3.36.1, 14.11-150200.5.39.1
postgresql14-llvmjit-devel - update to 14.11-150200.5.39.1
postgresql14-test - update to 14.11-150200.5.39.1
postgresql14-llvmjit - update to 14.11-150200.5.39.1
postgresql14-llvmjit-debuginfo - update to 14.11-150200.5.39.1
postgresql-private-libs - addressed in versions 15.5-2, 15.6-1.0.1
postgresql-private-devel - addressed in versions 15.5-2, 15.6-1.0.1
postgresql-client-15 (Ubuntu package) - update to 15.6-0ubuntu0.23.10.1
postgresql-15 (Ubuntu package) - update to 15.6-0ubuntu0.23.10.1
postgresql-15 (Debian package) - update to 15.6-0+deb12u1
postgresql15 - update to 15.6-1
postgresql15-devel-debuginfo - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-server-devel-debuginfo - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-docs - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15 - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-server-debuginfo - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-pltcl-debuginfo - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-debuginfo - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-plperl-debuginfo - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-debugsource - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-server - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-contrib - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-contrib-debuginfo - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-plpython - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-plpython-debuginfo - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-pltcl - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-devel - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-server-devel - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-plperl - addressed in versions 15.6-3.22.1, 15.6-150200.5.22.1
postgresql15-llvmjit - update to 15.6-150200.5.22.1
postgresql15-llvmjit-debuginfo - update to 15.6-150200.5.22.1
postgresql15-llvmjit-devel - update to 15.6-150200.5.22.1
postgresql15-test - update to 15.6-150200.5.22.1
postgresql16-plpython - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-docs - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-plperl-debuginfo - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-pltcl - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-debuginfo - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
libpq5 - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-server-debuginfo - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-contrib - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-contrib-debuginfo - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-server - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-plperl - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
libpq5-debuginfo - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-pltcl-debuginfo - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-plpython-debuginfo - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-debugsource - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
libecpg6-debuginfo - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16 - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
libecpg6 - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-server-devel - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-devel-debuginfo - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-devel - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
postgresql16-server-devel-debuginfo - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
libpq5-32bit - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
libpq5-debuginfo-32bit - update to 16.2-3.10.1
libecpg6-32bit - addressed in versions 16.2-3.10.1, 16.2-150200.5.10.1
libecpg6-debuginfo-32bit - update to 16.2-3.10.1
libpq5-32bit-debuginfo - update to 16.2-150200.5.10.1
postgresql16-mini-debugsource - update to 16.2-150200.5.10.1
postgresql16-devel-mini-debuginfo - update to 16.2-150200.5.10.1
postgresql16-test - update to 16.2-150200.5.10.1
postgresql16-llvmjit-debuginfo - update to 16.2-150200.5.10.1
postgresql16-devel-mini - update to 16.2-150200.5.10.1
postgresql16-llvmjit-devel - update to 16.2-150200.5.10.1
postgresql16-llvmjit - update to 16.2-150200.5.10.1
libecpg6-32bit-debuginfo - update to 16.2-150200.5.10.1
NetWorker Management Console (NMC) - update to 19.11
Dell NetWorker Virtual Edition - update to 19.11
IBM Observability with Instana - update to 274

• https://www.postgresql.org/support/security/CVE-2024-0985/

• Improper privilege management in PostgreSQL
• SUSE update for postgresql15
• SUSE update for postgresql12
• SUSE update for postgresql13
• SUSE update for postgresql16
• SUSE update for postgresql12
• SUSE update for postgresql14
• SUSE update for postgresql15
• SUSE update for postgresql16
• SUSE update for postgresql13
• SUSE update for postgresql14
• Red Hat Enterprise Linux 9 update for postgresql
• Red Hat Enterprise Linux 9 update for the postgresql:15 module
• Red Hat Software Collections update for rh-postgresql13-postgresql
• Ubuntu update for postgresql-12
• Red Hat Software Collections update for rh-postgresql10-postgresql
• Red Hat Enterprise Linux 8 update for the postgresql:10 module
• Red Hat Enterprise Linux 8 update for the postgresql:15 module
• Red Hat Enterprise Linux 8 update for the postgresql:12 module
• Red Hat Enterprise Linux 8 update for the postgresql:13 module
• Red Hat Software Collections update for rh-postgresql12-postgresql
• Red Hat Enterprise Linux 8.8 Extended Update Support update for the postgresql:15 module
• Ubuntu update for postgresql-9.5
• Red Hat Enterprise Linux 9.0 Extended Update Support update for postgresql
• Red Hat Enterprise Linux 9.2 Extended Update Support update for postgresql
• Red Hat Enterprise Linux 8.8 Extended Update Support update for the postgresql:12 module
• Red Hat Enterprise Linux 9.2 Extended Update Support update for the postgresql:15 module
• Red Hat Enterprise Linux 8.6 Extended Update Support update for the postgresql:13 module
• Red Hat Enterprise Linux 8.6 Extended Update Support update for the postgresql:12 module
• Red Hat Enterprise Linux 8 update for the postgresql:12 module
• Red Hat Enterprise Linux 8 update for the postgresql:12 module
• Red Hat Enterprise Linux 8.6 Extended Update Support update for the postgresql:10 module
• Red Hat Enterprise Linux 8.4 Advanced Update Support update for the postgresql:10 module
• Red Hat Enterprise Linux 8.8 Extended Update Support update for the postgresql:13 module
• Red Hat Enterprise Linux 8.2 Advanced Update Support update for the postgresql:10 module
• Red Hat Enterprise Linux 8.4 Advanced Update Support update for the postgresql:13 module
• Improper privilege management in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Storage Copy Data Management
• Improper Privilege Management in IBM Sterling Connect:Direct Web Services
• Multiple vulnerabilities in Dell APEX Cloud Platform for Microsoft Azure and Dell APEX Cloud Platform Foundation Software
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Debian update for postgresql-13
• Debian update for postgresql-15
• Multiple vulnerabilities in IBM Observability with Instana
• Multiple vulnerabilities in Dell NetWorker Virtual Edition and Dell NetWorker Management Console
• Multiple vulnerabilities in IBM Storage Scale System
• Amazon Linux AMI update for postgresql15
• Gentoo update for PostgreSQL
• Improper privilege management in IBM Security Guardium
• Multiple vulnerabilities in IBM Storage Protect Plus
• Multiple vulnerabilities in Dell PowerStore X
• openEuler 22.03 LTS SP4 update for libpq
• openEuler 24.03 LTS update for libpq
• openEuler 22.03 LTS SP1 update for libpq
• openEuler 22.03 LTS SP3 update for libpq
• Multiple vulnerabilities in Dell PowerStore T Family
• VMware Tanzu Greenplum update for third-party components
• Anolis OS update for postgresql:15 module
• Anolis OS update for postgresql:13 module
• Anolis OS update for postgresql:12 module
• Anolis OS update for postgresql:10 module
• Anolis OS update for postgresql
• openEuler 20.03 LTS SP4 update for postgresql-13
• Juniper Secure Analytics update for third-party components
• Multiple vulnerabilities in IBM Network Threat Analytics