Linux · Security advisory · February 26, 2024

ALSA-2024:0975: Security update for 16 packages

ALSA-2024:0975, released February 26, 2024, fixes 1 CVE across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0181
78th percentile

Fixed package versions

ProductReleaseFixed in
pg_repackalmalinux 81.4.6-3.module_el8.6.0+2760+1746ec94
pgauditalmalinux 81.5.0-1.module_el8.6.0+2760+1746ec94
postgres-decoderbufsalmalinux 80.10.0-2.module_el8.6.0+2760+1746ec94
postgresqlalmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-contribalmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-docsalmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-plperlalmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-plpython3almalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-pltclalmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-serveralmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-server-develalmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-staticalmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-testalmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-test-rpm-macrosalmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-upgradealmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1
postgresql-upgrade-develalmalinux 813.14-1.module_el8.9.0+3738+d55e2165.alma.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-0985 libecpg-compat3: Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQLallows an object creator to execute arbitr... 8.0 0.0181 None reported
Showing 1 to 1 of 1 1