SUSE-SU-2022:2946-1

Опубликовано: 31 авг. 2022

Источник: suse-cvrf

Описание

Security update for postgresql10

This update for postgresql10 fixes the following issues:

Upgrade to 10.22:
CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).

Список пакетов

SUSE Enterprise Storage 6

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Enterprise Storage 7

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise Module for Legacy 15 SP3

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise Server 15 SP1-BCL

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise Server 15 SP1-LTSS

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise Server 15 SP2-BCL

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise Server 15 SP2-LTSS

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Manager Proxy 4.1

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Manager Retail Branch Server 4.1

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

SUSE Manager Server 4.1

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-devel-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

openSUSE Leap 15.3

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

postgresql10-test-10.22-150100.8.50.1

openSUSE Leap 15.4

postgresql10-10.22-150100.8.50.1

postgresql10-contrib-10.22-150100.8.50.1

postgresql10-docs-10.22-150100.8.50.1

postgresql10-llvmjit-devel-10.22-150100.8.50.1

postgresql10-plperl-10.22-150100.8.50.1

postgresql10-plpython-10.22-150100.8.50.1

postgresql10-pltcl-10.22-150100.8.50.1

postgresql10-server-10.22-150100.8.50.1

postgresql10-test-10.22-150100.8.50.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20222946-1/
Link for SUSE-SU-2022:2946-1
https://lists.suse.com/pipermail/sle-security-updates/2022-August/012011.html
E-Mail link for SUSE-SU-2022:2946-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1202368
SUSE Bug 1202368
https://www.suse.com/security/cve/CVE-2022-2625/
SUSE CVE CVE-2022-2625 page

Описание

A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.

Затронутые продукты

SUSE Enterprise Storage 6:postgresql10-10.22-150100.8.50.1

SUSE Enterprise Storage 6:postgresql10-contrib-10.22-150100.8.50.1

SUSE Enterprise Storage 6:postgresql10-devel-10.22-150100.8.50.1

SUSE Enterprise Storage 6:postgresql10-docs-10.22-150100.8.50.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-2625.html
CVE-2022-2625
https://bugzilla.suse.com/1202368
SUSE Bug 1202368

SUSE-SU-2022:2946-1

Описание

Список пакетов

SUSE Enterprise Storage 6

SUSE Enterprise Storage 7

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise Module for Legacy 15 SP3

SUSE Linux Enterprise Server 15 SP1-BCL

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server 15 SP2-BCL

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Manager Proxy 4.1

SUSE Manager Retail Branch Server 4.1

SUSE Manager Server 4.1

openSUSE Leap 15.3

openSUSE Leap 15.4

Ссылки

Уязвимость: CVE-2022-2625

Описание

Затронутые продукты

Ссылки