Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:1869-1

Опубликовано: 27 мая 2022
Источник: suse-cvrf

Описание

Security update for postgresql12

This update for postgresql12 fixes the following issues:

  • CVE-2022-1552: Confine additional operations within 'security restricted operation' sandboxes (bsc#1199475).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
postgresql12-12.11-3.27.3
postgresql12-contrib-12.11-3.27.3
postgresql12-docs-12.11-3.27.3
postgresql12-plperl-12.11-3.27.3
postgresql12-plpython-12.11-3.27.3
postgresql12-pltcl-12.11-3.27.3
postgresql12-server-12.11-3.27.3
SUSE Linux Enterprise Server for SAP Applications 12 SP5
postgresql12-12.11-3.27.3
postgresql12-contrib-12.11-3.27.3
postgresql12-docs-12.11-3.27.3
postgresql12-plperl-12.11-3.27.3
postgresql12-plpython-12.11-3.27.3
postgresql12-pltcl-12.11-3.27.3
postgresql12-server-12.11-3.27.3
SUSE Linux Enterprise Software Development Kit 12 SP5
postgresql12-devel-12.11-3.27.3
postgresql12-server-devel-12.11-3.27.3

Ссылки

Описание

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:postgresql12-12.11-3.27.3
SUSE Linux Enterprise Server 12 SP5:postgresql12-contrib-12.11-3.27.3
SUSE Linux Enterprise Server 12 SP5:postgresql12-docs-12.11-3.27.3
SUSE Linux Enterprise Server 12 SP5:postgresql12-plperl-12.11-3.27.3
Ссылки