Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:1874-1

Опубликовано: 27 мая 2022
Источник: suse-cvrf

Описание

Security update for postgresql14

This update for postgresql14 fixes the following issues:

  • CVE-2022-1552: Confine additional operations within 'security restricted operation' sandboxes (bsc#1199475).

Список пакетов

HPE Helion OpenStack 8
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
SUSE Linux Enterprise Server 12 SP2-BCL
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
SUSE Linux Enterprise Server 12 SP3-BCL
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
SUSE Linux Enterprise Server 12 SP3-LTSS
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
SUSE Linux Enterprise Server 12 SP4-LTSS
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
SUSE Linux Enterprise Server 12 SP5
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
postgresql14-14.3-3.9.3
postgresql14-contrib-14.3-3.9.3
postgresql14-docs-14.3-3.9.3
postgresql14-plperl-14.3-3.9.3
postgresql14-plpython-14.3-3.9.3
postgresql14-pltcl-14.3-3.9.3
postgresql14-server-14.3-3.9.3
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
postgresql14-14.3-3.9.3
postgresql14-contrib-14.3-3.9.3
postgresql14-docs-14.3-3.9.3
postgresql14-plperl-14.3-3.9.3
postgresql14-plpython-14.3-3.9.3
postgresql14-pltcl-14.3-3.9.3
postgresql14-server-14.3-3.9.3
SUSE Linux Enterprise Software Development Kit 12 SP5
postgresql14-devel-14.3-3.9.3
postgresql14-server-devel-14.3-3.9.3
SUSE OpenStack Cloud 8
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
SUSE OpenStack Cloud 9
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
SUSE OpenStack Cloud Crowbar 8
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3
SUSE OpenStack Cloud Crowbar 9
libecpg6-14.3-3.9.3
libpq5-14.3-3.9.3
libpq5-32bit-14.3-3.9.3

Ссылки

Описание

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.

Затронутые продукты
HPE Helion OpenStack 8:libecpg6-14.3-3.9.3
HPE Helion OpenStack 8:libpq5-14.3-3.9.3
HPE Helion OpenStack 8:libpq5-32bit-14.3-3.9.3
SUSE Linux Enterprise Server 12 SP2-BCL:libecpg6-14.3-3.9.3
Ссылки