Описание
ELSA-2021-5236: postgresql:13 security update (MODERATE)
postgresql [13.5-1]
- Update to 13.5
- Resolves: #2024608
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
Module postgresql:13 is enabled
pg_repack
1.4.6-3.module+el8.5.0+20353+e924f9ed
pgaudit
1.5.0-1.module+el8.4.0+20016+06fd4df3
postgres-decoderbufs
0.10.0-2.module+el8.4.0+20016+06fd4df3
postgresql
13.5-1.module+el8.5.0+20464+55827c52
postgresql-contrib
13.5-1.module+el8.5.0+20464+55827c52
postgresql-docs
13.5-1.module+el8.5.0+20464+55827c52
postgresql-plperl
13.5-1.module+el8.5.0+20464+55827c52
postgresql-plpython3
13.5-1.module+el8.5.0+20464+55827c52
postgresql-pltcl
13.5-1.module+el8.5.0+20464+55827c52
postgresql-server
13.5-1.module+el8.5.0+20464+55827c52
postgresql-server-devel
13.5-1.module+el8.5.0+20464+55827c52
postgresql-static
13.5-1.module+el8.5.0+20464+55827c52
postgresql-test
13.5-1.module+el8.5.0+20464+55827c52
postgresql-test-rpm-macros
13.5-1.module+el8.5.0+20464+55827c52
postgresql-upgrade
13.5-1.module+el8.5.0+20464+55827c52
postgresql-upgrade-devel
13.5-1.module+el8.5.0+20464+55827c52
Oracle Linux x86_64
Module postgresql:13 is enabled
pg_repack
1.4.6-3.module+el8.5.0+20353+e924f9ed
pgaudit
1.5.0-1.module+el8.4.0+20016+06fd4df3
postgres-decoderbufs
0.10.0-2.module+el8.4.0+20016+06fd4df3
postgresql
13.5-1.module+el8.5.0+20464+55827c52
postgresql-contrib
13.5-1.module+el8.5.0+20464+55827c52
postgresql-docs
13.5-1.module+el8.5.0+20464+55827c52
postgresql-plperl
13.5-1.module+el8.5.0+20464+55827c52
postgresql-plpython3
13.5-1.module+el8.5.0+20464+55827c52
postgresql-pltcl
13.5-1.module+el8.5.0+20464+55827c52
postgresql-server
13.5-1.module+el8.5.0+20464+55827c52
postgresql-server-devel
13.5-1.module+el8.5.0+20464+55827c52
postgresql-static
13.5-1.module+el8.5.0+20464+55827c52
postgresql-test
13.5-1.module+el8.5.0+20464+55827c52
postgresql-test-rpm-macros
13.5-1.module+el8.5.0+20464+55827c52
postgresql-upgrade
13.5-1.module+el8.5.0+20464+55827c52
postgresql-upgrade-devel
13.5-1.module+el8.5.0+20464+55827c52
Связанные CVE
Связанные уязвимости
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.