Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 39 pgAdmin4 Security Advisory: Critical Remote Code Execution Fix

fedora
Calendar Grey April 23, 2024
Dist Fedora Esm H88
The recently applied patch resolves vulnerabilities linked to code injection in pgAdmin4 on Fedora 39. Discover further details regarding this security alert.
Backport fix for CVE-2024-3116.

Summary

pgAdmin is the most popular and feature rich Open Source administration and development

platform for PostgreSQL, the most advanced Open Source database in the world.

Update Information:

Backport fix for CVE-2024-3116.

Change Log

* Sun Apr 14 2024 Sandro Mani - 7.8-5 - Backport fix for CVE-2024-3116

References


[ 1 ] Bug #2273511 - CVE-2024-3116 pgadmin4: pgadmin: remote code execution via validate binary path API [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2273511

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-f04c2ec90b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: pgadmin4
Product: Fedora 39
Version: 7.8
Release: 5.fc39
Summary: Administration tool for PostgreSQL

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here