Alpine/postgresql14: high 8

Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions

Action: Upgrade postgresql14 to 14.11-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2024-0985#Alpine:v3.18/postgresql14
• https://security.alpinelinux.org/vuln/CVE-2024-0985

published 2024-02-08T13:15:08.927Z · modified 2026-09-15T08:17:48.431491Z · JSON