Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:1835-1

Опубликовано: 25 мая 2022
Источник: suse-cvrf

Описание

Security update for postgresql13

This update for postgresql13 fixes the following issues:

  • CVE-2022-1552: Confine additional operations within 'security restricted operation' sandboxes (bsc#1199475).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
postgresql13-13.7-3.21.3
postgresql13-contrib-13.7-3.21.3
postgresql13-docs-13.7-3.21.3
postgresql13-plperl-13.7-3.21.3
postgresql13-plpython-13.7-3.21.3
postgresql13-pltcl-13.7-3.21.3
postgresql13-server-13.7-3.21.3
SUSE Linux Enterprise Server for SAP Applications 12 SP5
postgresql13-13.7-3.21.3
postgresql13-contrib-13.7-3.21.3
postgresql13-docs-13.7-3.21.3
postgresql13-plperl-13.7-3.21.3
postgresql13-plpython-13.7-3.21.3
postgresql13-pltcl-13.7-3.21.3
postgresql13-server-13.7-3.21.3
SUSE Linux Enterprise Software Development Kit 12 SP5
postgresql13-devel-13.7-3.21.3
postgresql13-server-devel-13.7-3.21.3

Ссылки

Описание

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:postgresql13-13.7-3.21.3
SUSE Linux Enterprise Server 12 SP5:postgresql13-contrib-13.7-3.21.3
SUSE Linux Enterprise Server 12 SP5:postgresql13-docs-13.7-3.21.3
SUSE Linux Enterprise Server 12 SP5:postgresql13-plperl-13.7-3.21.3
Ссылки