Time-of-check Time-of-use (TOCTOU) Race Condition in PostgreSQL - CVE-2024-7348

Vulnerability identifier: #VU95605

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-7348

CWE-ID: CWE-367

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to escalate privileges within the database.

The vulnerability exists due to a race condition when executing concurrent pg_dump sessions. A remote user with privileges to create and drop non-temporary objects can execute arbitrary SQL commands with the privileges of the role running pg_dump (which is often a superuser).

PostgreSQL
Debian Linux
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
Galera for Ericsson 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
Anolis OS
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Ubuntu
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Basesystem Module
SUSE Package Hub 15
Server Applications Module
Legacy Module
openSUSE Leap
openEuler
PowerStore 500T
PowerStore 1000T
PowerStore 1200T
PowerStore 3000T
PowerStore 5000T
PowerStore 5200T
PowerStore 7000T
PowerStore 9000T
PowerStore 9200T
PowerStore 3200T
PowerProtect Cyber Recovery
PowerStoreT OS
IBM Security QRadar Network Threat Analytics
ClearPass Policy Manager
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
watsonx Assistant Cartridge
Aruba Networking ClearPass Policy Manager
Storage Protect Plus Server
EMC Cloud Tiering Appliance
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Sterling Connect:Direct Web Services
NetWorker
IBM Cloud Pak for Business Automation
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
postgresql-client-10 (Ubuntu package)
postgresql-10 (Ubuntu package)
postgresql-9.3 (Ubuntu package)
postgresql-client-9.3 (Ubuntu package)
postgresql-client-9.5 (Ubuntu package)
postgresql-9.5 (Ubuntu package)
postgres-decoderbufs
pgaudit
pg_repack
postgresql-contrib
postgresql-test
postgresql-server
postgresql-pltcl
postgresql-plpython
postgresql-plperl
postgresql-libs
postgresql-docs
postgresql-devel
postgresql
postgresql (Red Hat package)
postgresql-12 (Ubuntu package)
postgresql-client-12 (Ubuntu package)
postgresql-test-rpm-macros
postgresql-upgrade-devel
postgresql-upgrade
postgresql-static
postgresql-plpython3
postgresql-server-devel
postgresql12-server
postgresql12-pltcl
postgresql12-plpython-debuginfo
postgresql12-plpython
postgresql12
postgresql12-plperl
postgresql12-debuginfo
postgresql12-pltcl-debuginfo
postgresql12-contrib
postgresql12-server-devel
postgresql12-server-devel-debuginfo
postgresql12-devel
postgresql12-debugsource
postgresql12-devel-debuginfo
postgresql12-docs
postgresql12-contrib-debuginfo
postgresql12-server-debuginfo
postgresql12-plperl-debuginfo
postgresql12-test
postgresql12-llvmjit-devel
postgresql12-llvmjit
postgresql12-llvmjit-debuginfo
postgresql-13 (Debian package)
postgresql-llvmjit
postgresql-private-libs
postgresql-private-devel
postgresql-debugsource
postgresql-debuginfo
postgresql13-server
postgresql13
postgresql13-contrib
postgresql13-debuginfo
postgresql13-plpython-debuginfo
postgresql13-plperl
postgresql13-contrib-debuginfo
postgresql13-plpython
postgresql13-server-debuginfo
postgresql13-pltcl-debuginfo
postgresql13-plperl-debuginfo
postgresql13-pltcl
postgresql13-server-devel-debuginfo
postgresql13-server-devel
postgresql13-debugsource
postgresql13-devel
postgresql13-devel-debuginfo
postgresql13-docs
postgresql13-llvmjit-debuginfo
postgresql13-llvmjit
postgresql13-llvmjit-devel
postgresql13-test
postgresql-13-plperl
postgresql-13-llvmjit
postgresql-13-docs
postgresql-13-debugsource
postgresql-13-debuginfo
postgresql-13-contrib
postgresql-13
postgresql-13-plpython3
postgresql-13-pltcl
postgresql-13-private-devel
postgresql-13-private-libs
postgresql-13-server
postgresql-13-server-devel
postgresql-13-static
postgresql-13-test
postgresql-13-test-rpm-macros
postgresql-14 (Ubuntu package)
postgresql-client-14 (Ubuntu package)
postgresql14-contrib-debuginfo
postgresql14-devel
postgresql14-devel-debuginfo
postgresql14-debugsource
postgresql14-server-devel
postgresql14-server-devel-debuginfo
postgresql14-plpython
postgresql14-pltcl-debuginfo
postgresql14-plpython-debuginfo
postgresql14-plperl-debuginfo
postgresql14-server-debuginfo
postgresql14-pltcl
postgresql14-server
postgresql14-plperl
postgresql14-contrib
postgresql14-docs
postgresql14-debuginfo
postgresql14
postgresql14-llvmjit-debuginfo
postgresql14-test
postgresql14-llvmjit-devel
postgresql14-llvmjit
postgresql-15 (Debian package)
postgresql15-server
postgresql15-server-debuginfo
postgresql15-contrib-debuginfo
postgresql15-pltcl
postgresql15-plpython
postgresql15
postgresql15-plpython-debuginfo
postgresql15-debuginfo
postgresql15-plperl
postgresql15-debugsource
postgresql15-contrib
postgresql15-plperl-debuginfo
postgresql15-devel-debuginfo
postgresql15-server-devel-debuginfo
postgresql15-server-devel
postgresql15-devel
postgresql15-pltcl-debuginfo
postgresql15-docs
postgresql15-test
postgresql15-llvmjit
postgresql15-llvmjit-devel
postgresql15-llvmjit-debuginfo
postgresql-16 (Ubuntu package)
postgresql-client-16 (Ubuntu package)
postgresql16-server-devel
postgresql16-devel-debuginfo
postgresql16-server-devel-debuginfo
libecpg6-32bit
libpq5-debuginfo-32bit
libecpg6-debuginfo-32bit
libpq5-32bit
postgresql16-docs
libpq5
postgresql16-server
libecpg6
postgresql16-contrib-debuginfo
libpq5-debuginfo
postgresql16-pltcl-debuginfo
libecpg6-debuginfo
postgresql16-pltcl
postgresql16-devel
postgresql16-server-debuginfo
postgresql16-plperl
postgresql16-plpython-debuginfo
postgresql16-debugsource
postgresql16-plperl-debuginfo
postgresql16-plpython
postgresql16-contrib
postgresql16
postgresql16-debuginfo
postgresql16-devel-mini
postgresql16-llvmjit-devel
postgresql16-llvmjit-debuginfo
postgresql16-test
postgresql16-devel-mini-debuginfo
postgresql16-mini-debugsource
postgresql16-llvmjit
libecpg6-32bit-debuginfo
libpq5-32bit-debuginfo
libecpg6-64bit-debuginfo
libpq5-64bit
libpq5-64bit-debuginfo
libecpg6-64bit
IBM Storage Scale System
Juniper Secure Analytics (JSA)
Dell EMC VxRail Appliance
IBM Security Verify Access
NetWorker Management Console

Install updates from vendor's website.

PostgreSQL - addressed in versions 12.20, 13.16, 14.13, 15.8, 16.4
IBM Security QRadar Network Threat Analytics - update to 1.4.3
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.2.2
IBM Sterling Connect:Direct Web Services - addressed in versions 6.1.0.26, 6.2.0.25, 6.3.0.10
ClearPass Policy Manager - addressed in versions 6.11.10, 6.12.4
PowerProtect Cyber Recovery - update to 19.18.0.2
postgresql-client-10 (Ubuntu package) - update to Ubuntu Pro
postgresql-10 (Ubuntu package) - update to Ubuntu Pro
postgresql-9.3 (Ubuntu package) - update to Ubuntu Pro
postgresql-client-9.3 (Ubuntu package) - update to Ubuntu Pro
postgresql-client-9.5 (Ubuntu package) - update to Ubuntu Pro
postgresql-9.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
postgres-decoderbufs - addressed in versions 0.10.0-2, 1.9.7-1.Final
pgaudit - addressed in versions 1.4.0-7, 1.5.0-1, 1.7.0-1
pg_repack - addressed in versions 1.4.6-3, 1.4.8-1
PowerStoreT OS - update to 3.6.1.5-2456810
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.1.1
watsonx Assistant Cartridge - update to 5.1.1
IBM Storage Scale System - addressed in versions 6.1.9.4, 6.2.1.1
Aruba Networking ClearPass Policy Manager - addressed in versions 6.11.10, 6.12.4
Juniper Secure Analytics (JSA) - update to 7.5.0 UP11 IF03
Dell EMC VxRail Appliance - update to 8.0.311
postgresql-contrib - addressed in versions 9.2.24-9, 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-test - addressed in versions 9.2.24-9, 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-server - addressed in versions 9.2.24-9, 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-pltcl - addressed in versions 9.2.24-9, 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-plpython - update to 9.2.24-9
postgresql-plperl - addressed in versions 9.2.24-9, 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-libs - update to 9.2.24-9
postgresql-docs - addressed in versions 9.2.24-9, 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-devel - update to 9.2.24-9
postgresql - addressed in versions 9.2.24-9, 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql (Red Hat package) - addressed in versions 9.2.24-9.el7_9.1, 13.16-1.el9_0, 13.16-1.el9_2, 13.16-1.el9_4
IBM Security Verify Access - update to 10.0.9
Storage Protect Plus Server - update to 10.1.16.3
postgresql-12 (Ubuntu package) - update to 12.20-0ubuntu0.20.04.1
postgresql-client-12 (Ubuntu package) - update to 12.20-0ubuntu0.20.04.1
postgresql-test-rpm-macros - addressed in versions 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-upgrade-devel - addressed in versions 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-upgrade - addressed in versions 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-static - addressed in versions 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-plpython3 - addressed in versions 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql-server-devel - addressed in versions 12.20-1.0.1, 13.16-1.0.1, 15.8-1.0.1
postgresql12-server - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-pltcl - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-plpython-debuginfo - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-plpython - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12 - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-plperl - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-debuginfo - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-pltcl-debuginfo - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-contrib - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-server-devel - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-server-devel-debuginfo - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-devel - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-debugsource - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-devel-debuginfo - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-docs - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-contrib-debuginfo - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-server-debuginfo - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-plperl-debuginfo - addressed in versions 12.20-3.58.1, 12.20-150200.8.63.1
postgresql12-test - update to 12.20-150200.8.63.1
postgresql12-llvmjit-devel - update to 12.20-150200.8.63.1
postgresql12-llvmjit - update to 12.20-150200.8.63.1
postgresql12-llvmjit-debuginfo - update to 12.20-150200.8.63.1
EMC Cloud Tiering Appliance - update to 13.2.0.2.32
postgresql-13 (Debian package) - update to 13.16-0+deb11u1
postgresql-llvmjit - addressed in versions 13.16-1, 15.8-1
postgresql-server-devel - addressed in versions 13.16-1, 15.8-1
postgresql-static - addressed in versions 13.16-1, 15.8-1
postgresql-test - addressed in versions 13.16-1, 15.8-1
postgresql-private-libs - addressed in versions 13.16-1, 15.8-1
postgresql-private-devel - addressed in versions 13.16-1, 15.8-1
postgresql-pltcl - addressed in versions 13.16-1, 15.8-1
postgresql-plpython3 - addressed in versions 13.16-1, 15.8-1
postgresql-plperl - addressed in versions 13.16-1, 15.8-1
postgresql-server - addressed in versions 13.16-1, 15.8-1
postgresql-docs - addressed in versions 13.16-1, 15.8-1
postgresql-debugsource - addressed in versions 13.16-1, 15.8-1
postgresql-contrib - addressed in versions 13.16-1, 15.8-1
postgresql - addressed in versions 13.16-1, 15.8-1
postgresql-test-rpm-macros - addressed in versions 13.16-1, 15.8-1
postgresql-debuginfo - addressed in versions 13.16-1, 15.8-1
postgresql13-server - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13 - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-contrib - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-debuginfo - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-plpython-debuginfo - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-plperl - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-contrib-debuginfo - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-plpython - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-server-debuginfo - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-pltcl-debuginfo - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-plperl-debuginfo - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-pltcl - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-server-devel-debuginfo - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-server-devel - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-debugsource - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-devel - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-devel-debuginfo - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-docs - addressed in versions 13.16-3.52.1, 13.16-150200.5.61.1
postgresql13-llvmjit-debuginfo - update to 13.16-150200.5.61.1
postgresql13-llvmjit - update to 13.16-150200.5.61.1
postgresql13-llvmjit-devel - update to 13.16-150200.5.61.1
postgresql13-test - update to 13.16-150200.5.61.1
postgresql-13-plperl - update to 13.20-1
postgresql-13-llvmjit - update to 13.20-1
postgresql-13-docs - update to 13.20-1
postgresql-13-debugsource - update to 13.20-1
postgresql-13-debuginfo - update to 13.20-1
postgresql-13-contrib - update to 13.20-1
postgresql-13 - update to 13.20-1
postgresql-13-plpython3 - update to 13.20-1
postgresql-13-pltcl - update to 13.20-1
postgresql-13-private-devel - update to 13.20-1
postgresql-13-private-libs - update to 13.20-1
postgresql-13-server - update to 13.20-1
postgresql-13-server-devel - update to 13.20-1
postgresql-13-static - update to 13.20-1
postgresql-13-test - update to 13.20-1
postgresql-13-test-rpm-macros - update to 13.20-1
postgresql-14 (Ubuntu package) - update to 14.13-0ubuntu0.22.04.1
postgresql-client-14 (Ubuntu package) - update to 14.13-0ubuntu0.22.04.1
postgresql14-contrib-debuginfo - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-devel - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-devel-debuginfo - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-debugsource - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-server-devel - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-server-devel-debuginfo - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-plpython - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-pltcl-debuginfo - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-plpython-debuginfo - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-plperl-debuginfo - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-server-debuginfo - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-pltcl - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-server - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-plperl - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-contrib - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-docs - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-debuginfo - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14 - addressed in versions 14.13-3.44.1, 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-llvmjit-debuginfo - addressed in versions 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-test - addressed in versions 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-llvmjit-devel - addressed in versions 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql14-llvmjit - addressed in versions 14.13-150200.5.47.1, 14.13-150600.16.6.1
postgresql-15 (Debian package) - update to 15.8-0+deb12u1
postgresql-private-libs - update to 15.8-1.0.1
postgresql-private-devel - update to 15.8-1.0.1
postgresql15-server - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-server-debuginfo - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-contrib-debuginfo - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-pltcl - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-plpython - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15 - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-plpython-debuginfo - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-debuginfo - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-plperl - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-debugsource - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-contrib - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-plperl-debuginfo - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-devel-debuginfo - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-server-devel-debuginfo - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-server-devel - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-devel - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-pltcl-debuginfo - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-docs - addressed in versions 15.8-3.28.1, 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-test - addressed in versions 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-llvmjit - addressed in versions 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-llvmjit-devel - addressed in versions 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql15-llvmjit-debuginfo - addressed in versions 15.8-150200.5.30.1, 15.8-150600.16.6.1
postgresql-16 (Ubuntu package) - update to 16.4-0ubuntu0.24.04.1
postgresql-client-16 (Ubuntu package) - update to 16.4-0ubuntu0.24.04.1
postgresql16-server-devel - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-devel-debuginfo - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-server-devel-debuginfo - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
libecpg6-32bit - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
libpq5-debuginfo-32bit - update to 16.4-3.16.1
libecpg6-debuginfo-32bit - update to 16.4-3.16.1
libpq5-32bit - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-docs - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
libpq5 - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-server - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
libecpg6 - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-contrib-debuginfo - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
libpq5-debuginfo - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-pltcl-debuginfo - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
libecpg6-debuginfo - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-pltcl - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-devel - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-server-debuginfo - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-plperl - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-plpython-debuginfo - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-debugsource - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-plperl-debuginfo - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-plpython - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-contrib - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16 - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-debuginfo - addressed in versions 16.4-3.16.1, 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-devel-mini - addressed in versions 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-llvmjit-devel - addressed in versions 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-llvmjit-debuginfo - addressed in versions 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-test - addressed in versions 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-devel-mini-debuginfo - addressed in versions 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-mini-debugsource - addressed in versions 16.4-150200.5.16.1, 16.4-150600.16.5.1
postgresql16-llvmjit - addressed in versions 16.4-150200.5.16.1, 16.4-150600.16.5.1
libecpg6-32bit-debuginfo - addressed in versions 16.4-150200.5.16.1, 16.4-150600.16.5.1
libpq5-32bit-debuginfo - addressed in versions 16.4-150200.5.16.1, 16.4-150600.16.5.1
libecpg6-64bit-debuginfo - update to 16.4-150600.16.5.1
libpq5-64bit - update to 16.4-150600.16.5.1
libpq5-64bit-debuginfo - update to 16.4-150600.16.5.1
libecpg6-64bit - update to 16.4-150600.16.5.1
NetWorker - addressed in versions 19.11.0.3, 19.12.0.0
NetWorker Management Console - addressed in versions 19.11.0.3, 19.12.0.0
IBM Cloud Pak for Business Automation - addressed in versions 24.0.0-IF004, 24.0.1-IF001

• https://www.postgresql.org/support/security/CVE-2024-7348/

• Privilege escalation in PostgreSQL
• Debian update for postgresql-15
• Debian update for postgresql-13
• openEuler 22.03 LTS SP1 update for postgresql
• Ubuntu update for postgresql-12
• openEuler 24.03 LTS update for postgresql
• openEuler 22.03 LTS SP4 update for postgresql
• openEuler 22.03 LTS SP3 update for postgresql
• Red Hat Enterprise Linux 8 update for the postgresql:16 module
• Red Hat Enterprise Linux 9 update for the postgresql:16 module
• Red Hat Enterprise Linux 9 update for the postgresql
• Red Hat Enterprise Linux 8 update for the postgresql:12 module
• Red Hat Enterprise Linux 8 update for the postgresql:15 module
• Red Hat Enterprise Linux 8 update for the postgresql:12 module
• Red Hat Enterprise Linux 8 update for the postgresql:12 module
• Red Hat Enterprise Linux 8 update for the postgresql:12 module
• Red Hat Enterprise Linux 9 update for the postgresql:15 module
• Red Hat Enterprise Linux 8 update for the postgresql:13 module
• Red Hat Enterprise Linux 8 update for the postgresql:15 module
• Red Hat Enterprise Linux 9 update for postgresql
• Red Hat Enterprise Linux 9 update for postgresql
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• SUSE update for postgresql16
• Red Hat Enterprise Linux 8 update for the postgresql:13 module
• Red Hat Enterprise Linux 8 update for the postgresql:13 module
• Red Hat Enterprise Linux 8 update for the postgresql:12 module
• Ubuntu update for postgresql-9.5
• Gentoo update for PostgreSQL
• Multiple vulnerabilities in IBM Storage Protect Plus
• SUSE update for postgresql16
• Ubuntu update for postgresql-10
• Multiple vulnerabilities in IBM Storage Scale System
• SUSE update for postgresql16
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for postgresql
• IBM Sterling Connect:Direct Web Services update for PostgreSQL
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell VxRail Appliance
• Multiple vulnerabilities in IBM Security Verify Access
• Multiple vulnerabilities in Aruba Networking ClearPass Policy Manager
• Multiple vulnerabilities in HPE Aruba Networking ClearPass Policy Manager (CPPM)
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
• Anolis OS update for postgresql:15 module
• Anolis OS update for postgresql:13 module
• Anolis OS update for postgresql:12 module
• Anolis OS update for postgresql
• Anolis OS update for postgresql
• openEuler 20.03 LTS SP4 update for postgresql-13
• Juniper Secure Analytics update for third-party components
• Multiple vulnerabilities in Dell NetWorker and NetWorker Management Console
• Multiple vulnerabilities in Dell PowerStoreT OS
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• Multiple vulnerabilities in IBM Network Threat Analytics