Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2021:2361

Опубликовано: 09 июн. 2021
Источник: rocky
Оценка: Important

Описание

Important: postgresql:10 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (10.17).

Security Fix(es):

  • postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027)

  • postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
postgresql-testx86_641.module+el8.4.0+548+9eccbe3fpostgresql-test-10.17-1.module+el8.4.0+548+9eccbe3f.x86_64.rpm
postgresqlx86_641.module+el8.4.0+547+51cac6dbpostgresql-9.6.22-1.module+el8.4.0+547+51cac6db.x86_64.rpm
postgres-decoderbufsx86_642.module+el8.4.0+587+d46efd10postgres-decoderbufs-0.10.0-2.module+el8.4.0+587+d46efd10.x86_64.rpm
postgresql-pltclx86_641.module+el8.4.0+587+d46efd10postgresql-pltcl-12.7-1.module+el8.4.0+587+d46efd10.x86_64.rpm
postgresql-server-develx86_641.module+el8.4.0+547+51cac6dbpostgresql-server-devel-9.6.22-1.module+el8.4.0+547+51cac6db.x86_64.rpm
postgresql-plpython3x86_641.module+el8.4.0+547+51cac6dbpostgresql-plpython3-9.6.22-1.module+el8.4.0+547+51cac6db.x86_64.rpm
postgresql-docsx86_641.module+el8.4.0+547+51cac6dbpostgresql-docs-9.6.22-1.module+el8.4.0+547+51cac6db.x86_64.rpm
pgauditx86_641.module+el8.4.0+546+3620623epgaudit-1.5.0-1.module+el8.4.0+546+3620623e.x86_64.rpm
postgresql-server-develx86_641.module+el8.4.0+546+3620623epostgresql-server-devel-13.3-1.module+el8.4.0+546+3620623e.x86_64.rpm
postgresql-upgradex86_641.module+el8.4.0+546+3620623epostgresql-upgrade-13.3-1.module+el8.4.0+546+3620623e.x86_64.rpm

Показывать по

Связанные CVE

Связанные уязвимости

suse-cvrf
больше 4 лет назад

Security update for postgresql10

suse-cvrf
больше 4 лет назад

Security update for postgresql10

suse-cvrf
больше 4 лет назад

Security update for postgresql10

suse-cvrf
больше 4 лет назад

Security update for postgresql10

suse-cvrf
больше 4 лет назад

Security update for postgresql10