Stay Secure with the Latest Linux Advisories

security advisoryman-in-the-middlepostgresql

Mageia 9: 2024-0372 Critical Advisory: PostgreSQL Security Issues

PostgreSQL row security below e.g. subqueries disregards user ID changes. (CVE-2024-10976) PostgreSQL libpq retains an error message from man-in-the-middle. (CVE-2024-10977) PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID. . MGASA-2024-0372 - Updated postgresql15 & postgresql13 packages fix security vulnerabilities Publication date: 27 Nov 2024 URL: https://advisories.mageia.org/MGASA-2024-0372.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979 PostgreSQL row security below e.g. subqueries disregards user ID changes. (CVE-2024-10976) PostgreSQL libpq retains an error message from man-in-the-middle. (CVE-2024-10977) PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID. (CVE-2024-10978) PostgreSQL PL/Perl environment variable changes execute arbitrary code. (CVE-2024-10979) References: - https://bugs.mageia.org/show_bug.cgi?id=33779 - https://www.postgresql.org/about/news/postgresql-171-165-159-1414-1317-and-1221-released-2955/ - https://www.postgresql.org/about/news/postgresql-172-166-1510-1415-1318-and-1222-released-2965/ - https://www.cve.org/CVERecord?id=CVE-2024-10976 - https://www.cve.org/CVERecord?id=CVE-2024-10977 - https://www.cve.org/CVERecord?id=CVE-2024-10978 - https://www.cve.org/CVERecord?id=CVE-2024-10979 SRPMS: - 9/core/postgresql15-15.10-1.mga9 - 9/core/postgresql13-13.18-1.mga9 . Revised MySQL packages for Fedora tackle significant security vulnerabilities, improving database safeguarding.. PostgreSQL security, Mageia advisory, user ID vulnerabilities, session authorization issues, error message security. . Severity: Critical. LinuxSecurity.com Team

Nov 27, 2024 •Critical Mageia