Bug Report: CVE-2024-0985 PostgreSQL security alert

[jbauerrfid]

Describe the bug Restricted users can exploit materialized views to increase their permissions. There is a detailed bug description at https://www.postgresql.org/support/security/CVE-2024-0985/

To Reproduce See above.

Expected behavior Materialized views get executed in the scope of the authenticated user.

Workarounds n/a

Screenshots and Build Links n/a

Additional context The Postgres image shall be updated to a fixed version:

• 15.6
• 14.11
• 13.14
• 12.18

[jbauerrfid]

This issue has been fixed by https://github.com/CircleCI-Public/cimg-postgres/pull/117

Hence closing this.