PostgreSQL:13 Bug Fix and Enhancement Update
Summary
ALEA-2021:4276: postgresql:13 bug fix and enhancement update. Affects pg_repack across 3 version ranges.
< 1.4.6-3.module_el8.5.0+2607+8c0fd184
< 1.4.6-3.module_el8.6.0+2758+4f4474df
< 1.4.6-3.module_el8.6.0+2760+1746ec94
Fixed in 1.4.6-3.module_el8.5.0+2607+8c0fd184, 1.4.6-3.module_el8.6.0+2758+4f4474df or 1.4.6-3.module_el8.6.0+2760+1746ec94, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PostgreSQL is an open-source relational database management system known for its robustness, scalability, and extensibility. It provides a wide range of features and is widely used in various applications. This vulnerability affects the pg_repack, pgaudit, and postgres-decoderbufs packages in AlmaLinux 8. These packages are used to enhance the functionality and security of PostgreSQL.
Vulnerability Detail
The vulnerability in PostgreSQL:13 is related to a bug fix and enhancement update. It is important to keep the software up to date to ensure the stability and security of the system. This update addresses various issues and introduces improvements to the packages mentioned above. Failure to apply the update may leave the system vulnerable to known exploits and may impact the overall performance and security of the PostgreSQL database.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update pg_repack-
< 1.4.6-3.module_el8.5.0+2607+8c0fd1841.4.6-3.module_el8.5.0+2607+8c0fd184 -
< 1.4.6-3.module_el8.6.0+2758+4f4474df1.4.6-3.module_el8.6.0+2758+4f4474df -
< 1.4.6-3.module_el8.6.0+2760+1746ec941.4.6-3.module_el8.6.0+2760+1746ec94
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Conclusion
Keeping the PostgreSQL packages up to date is crucial for maintaining a secure and stable database environment. By updating the affected packages to the fixed versions mentioned, the vulnerabilities can be patched, and the system can be protected. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for pg_repack →
FAQ
PostgreSQL is an open-source relational database management system known for its robustness, scalability, and extensibility. It provides a wide range of features and is widely used in various applications.
pg_repack is a PostgreSQL extension that provides a way to remove bloat from tables and indexes, reclaiming disk space and improving performance.
pgaudit is a PostgreSQL extension that provides detailed logging and auditing capabilities for PostgreSQL databases, helping to track and analyze database activity.
postgres-decoderbufs is a PostgreSQL extension that allows decoding and analyzing the PostgreSQL write-ahead log (WAL) for various purposes, such as replication and auditing.
Updating the packages is important to ensure the stability and security of the PostgreSQL database. Failure to apply the update may leave the system vulnerable to known exploits and may impact the overall performance and security of the system.
References
Related vulnerabilities
Recent vulnerabilities recorded for pg_repack.
