Linux · Security advisory · December 4, 2024

ELSA-2024-10788: Security update for 19 packages

ELSA-2024-10788, released December 4, 2024, fixes 3 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0439
91st percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
pg_repackol 90:1.5.1-1.module+el9.5.0+90450+cb2feb1d
pgauditol 90:16.0-1.module+el9.4.0+90394+9e4f3cba
pgvectorol 90:0.6.2-1.module+el9.5.0+90425+0820a3c3
postgres-decoderbufsol 90:2.4.0-1.Final.module+el9.4.0+90394+9e4f3cba
postgresqlol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-contribol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-docsol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-plperlol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-plpython3ol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-pltclol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-private-develol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-private-libsol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-serverol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-server-develol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-staticol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-testol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-test-rpm-macrosol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-upgradeol 90:16.6-1.module+el9.5.0+90450+cb2feb1d
postgresql-upgrade-develol 90:16.6-1.module+el9.5.0+90450+cb2feb1d

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-10979 postgresql: This update for postgresql, postgresql16, postgresql17 fixes the following issues: This update ships postgresql17 ,... 8.8 0.0439 None reported
High CVE-2024-10976 postgresql: This update for postgresql, postgresql16, postgresql17 fixes the following issues: This update ships postgresql17 ,... 8.8 0.0077 None reported
High CVE-2024-10978 postgresql: This update for postgresql, postgresql16, postgresql17 fixes the following issues: This update ships postgresql17 ,... 8.8 0.0069 None reported
Showing 1 to 3 of 3 1