RLSA-2024:10787

Описание

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

• postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID (CVE-2024-10978)

• postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code (CVE-2024-10979)

• postgresql: PostgreSQL row security below e.g. subqueries disregards user ID changes (CVE-2024-10976)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.