CVE-2024-10979 is a vulnerability in PostgreSQL where changes to environment variables in the PL/Perl procedural language environment can lead to arbitrary code execution. This vulnerability is rated as important by Red Hat Product Security and affects PostgreSQL packages in Red Hat Enterprise Linux 7 Extended Lifecycle Support. The issue is addressed by a security update released by Red Hat, which fixes the underlying problem. The advisory references Bugzilla 2326253 and provides updated package versions for PostgreSQL 9.2.24-9.el7_9.2.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code via environment variable manipulation in the PostgreSQL PL/Perl environment. This could lead to unauthorized code execution within the context of the database server, potentially compromising the affected system.

Red Hat has released an official security update for PostgreSQL in Red Hat Enterprise Linux 7 Extended Lifecycle Support that addresses this vulnerability. Users should apply the update as described in the Red Hat advisory RHSA-2024:10882 and the referenced article https://access.redhat.com/articles/11258. Applying this update mitigates the vulnerability. No additional mitigation steps are indicated by the vendor advisory.