Moderate: postgresql:10 security update
Summary
ALSA-2023:0113: Moderate: postgresql:10 security update. Affects postgresql versions < 10.23-1.module_el8.7.0+3379+54d21c26. Fixed in 10.23-1.module_el8.7.0+3379+54d21c26. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PostgreSQL is an advanced object-relational database management system (DBMS). It provides a robust and scalable platform for storing and managing structured data. PostgreSQL is widely used in various applications and industries due to its reliability and extensive feature set.
Vulnerability Detail
The vulnerability in PostgreSQL version 10 is related to extension scripts replacing objects that do not belong to the extension. This can lead to unauthorized access or modification of data, potentially compromising the integrity and confidentiality of the database. The vulnerability is identified as CVE-2022-2625.
How To Fix
Minimum fixed version
10.23-1.module_el8.7.0+3379+54d21c26
This is the first release that contains the fix.
sudo dnf update postgresqlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Updating to the fixed version is the recommended solution.
Conclusion
PostgreSQL version 10 is affected by a moderate security vulnerability that can lead to unauthorized access or modification of data. It is crucial to update to the fixed version to mitigate the risk. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for postgresql →
FAQ
PostgreSQL is an advanced object-relational database management system (DBMS) known for its reliability and extensive feature set. It is widely used in various applications and industries.
The vulnerability can allow unauthorized access or modification of data in the PostgreSQL database, potentially compromising its integrity and confidentiality.
To fix this vulnerability, update PostgreSQL to version 10.23-1.module_el8.7.0+3379+54d21c26 or later.
No specific workarounds are mentioned for this vulnerability. Updating to the fixed version is the recommended solution.
Regularly update PostgreSQL and other software components to ensure the latest security fixes are applied. Additionally, follow secure coding practices and implement proper access controls.
Related vulnerabilities
Recent vulnerabilities recorded for postgresql.
