Security Vulnerabilities fixed in pgaudit RHSA-2021:2375

Description

PostgreSQL is an advanced object-relational database management system (DBMS). The following packages have been upgraded to a later upstream version: postgresql (13.3). Security Fix(es): postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027) postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028) postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029) postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027) postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028) postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. SolutionFor details on how to apply this update, which includes the changes described in this advisory, refer to:https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update.

Affected Applications

pgaudit

CVE References

CVE-2021-32027 CVE-2021-32028 CVE-2021-32029

Other References

https://access.redhat.com/errata/RHSA-2021:2375