Alibaba Cloud Linux 2.1903 Security Advisory: ALINUX2-SA-2025:0006
Issued: 2025-01-10
Updated: 2025-01-10
Summary
postgresql security update
Severity
Important
Description
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities:
CVE-2024-10979:
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
References
Updated Packages
- aarch64
- postgresql-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-contrib-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-debuginfo-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-devel-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-docs-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-libs-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-plperl-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-plpython-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-pltcl-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-server-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-static-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-test-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- postgresql-upgrade-9.2.24-9.1.al7.2.aarch64.rpm → (download)
- i686
- postgresql-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-contrib-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-debuginfo-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-devel-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-docs-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-libs-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-plperl-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-plpython-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-pltcl-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-server-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-static-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-test-9.2.24-9.1.al7.2.i686.rpm → (download)
- postgresql-upgrade-9.2.24-9.1.al7.2.i686.rpm → (download)
- src
- postgresql-9.2.24-9.1.al7.2.src.rpm → (download)
- x86_64
- postgresql-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-contrib-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-debuginfo-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-devel-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-docs-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-libs-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-plperl-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-plpython-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-pltcl-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-server-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-static-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-test-9.2.24-9.1.al7.2.x86_64.rpm → (download)
- postgresql-upgrade-9.2.24-9.1.al7.2.x86_64.rpm → (download)