SUSE-SU-2023:0450-1

Опубликовано: 20 фев. 2023

Источник: suse-cvrf

Описание

Security update for postgresql12

This update for postgresql12 fixes the following issues:

Update to 12.14:

CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102).

Список пакетов

Container suse/postgres:12

postgresql12-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

SUSE Enterprise Storage 7

postgresql12-12.14-150200.8.41.1

postgresql12-contrib-12.14-150200.8.41.1

postgresql12-devel-12.14-150200.8.41.1

postgresql12-docs-12.14-150200.8.41.1

postgresql12-plperl-12.14-150200.8.41.1

postgresql12-plpython-12.14-150200.8.41.1

postgresql12-pltcl-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

postgresql12-server-devel-12.14-150200.8.41.1

SUSE Enterprise Storage 7.1

postgresql12-12.14-150200.8.41.1

postgresql12-contrib-12.14-150200.8.41.1

postgresql12-devel-12.14-150200.8.41.1

postgresql12-docs-12.14-150200.8.41.1

postgresql12-plperl-12.14-150200.8.41.1

postgresql12-plpython-12.14-150200.8.41.1

postgresql12-pltcl-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

postgresql12-server-devel-12.14-150200.8.41.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

postgresql12-12.14-150200.8.41.1

postgresql12-contrib-12.14-150200.8.41.1

postgresql12-devel-12.14-150200.8.41.1

postgresql12-docs-12.14-150200.8.41.1

postgresql12-plperl-12.14-150200.8.41.1

postgresql12-plpython-12.14-150200.8.41.1

postgresql12-pltcl-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

postgresql12-server-devel-12.14-150200.8.41.1

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

postgresql12-12.14-150200.8.41.1

postgresql12-contrib-12.14-150200.8.41.1

postgresql12-devel-12.14-150200.8.41.1

postgresql12-docs-12.14-150200.8.41.1

postgresql12-plperl-12.14-150200.8.41.1

postgresql12-plpython-12.14-150200.8.41.1

postgresql12-pltcl-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

postgresql12-server-devel-12.14-150200.8.41.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

postgresql12-12.14-150200.8.41.1

postgresql12-contrib-12.14-150200.8.41.1

postgresql12-devel-12.14-150200.8.41.1

postgresql12-docs-12.14-150200.8.41.1

postgresql12-plperl-12.14-150200.8.41.1

postgresql12-plpython-12.14-150200.8.41.1

postgresql12-pltcl-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

postgresql12-server-devel-12.14-150200.8.41.1

SUSE Linux Enterprise Server 15 SP2-LTSS

postgresql12-12.14-150200.8.41.1

postgresql12-contrib-12.14-150200.8.41.1

postgresql12-devel-12.14-150200.8.41.1

postgresql12-docs-12.14-150200.8.41.1

postgresql12-plperl-12.14-150200.8.41.1

postgresql12-plpython-12.14-150200.8.41.1

postgresql12-pltcl-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

postgresql12-server-devel-12.14-150200.8.41.1

SUSE Linux Enterprise Server 15 SP3-LTSS

postgresql12-12.14-150200.8.41.1

postgresql12-contrib-12.14-150200.8.41.1

postgresql12-devel-12.14-150200.8.41.1

postgresql12-docs-12.14-150200.8.41.1

postgresql12-plperl-12.14-150200.8.41.1

postgresql12-plpython-12.14-150200.8.41.1

postgresql12-pltcl-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

postgresql12-server-devel-12.14-150200.8.41.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

postgresql12-12.14-150200.8.41.1

postgresql12-contrib-12.14-150200.8.41.1

postgresql12-devel-12.14-150200.8.41.1

postgresql12-docs-12.14-150200.8.41.1

postgresql12-plperl-12.14-150200.8.41.1

postgresql12-plpython-12.14-150200.8.41.1

postgresql12-pltcl-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

postgresql12-server-devel-12.14-150200.8.41.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

postgresql12-12.14-150200.8.41.1

postgresql12-contrib-12.14-150200.8.41.1

postgresql12-devel-12.14-150200.8.41.1

postgresql12-docs-12.14-150200.8.41.1

postgresql12-plperl-12.14-150200.8.41.1

postgresql12-plpython-12.14-150200.8.41.1

postgresql12-pltcl-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

postgresql12-server-devel-12.14-150200.8.41.1

openSUSE Leap 15.4

postgresql12-12.14-150200.8.41.1

postgresql12-contrib-12.14-150200.8.41.1

postgresql12-devel-12.14-150200.8.41.1

postgresql12-docs-12.14-150200.8.41.1

postgresql12-llvmjit-12.14-150200.8.41.1

postgresql12-llvmjit-devel-12.14-150200.8.41.1

postgresql12-plperl-12.14-150200.8.41.1

postgresql12-plpython-12.14-150200.8.41.1

postgresql12-pltcl-12.14-150200.8.41.1

postgresql12-server-12.14-150200.8.41.1

postgresql12-server-devel-12.14-150200.8.41.1

postgresql12-test-12.14-150200.8.41.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20230450-1/
Link for SUSE-SU-2023:0450-1
https://lists.suse.com/pipermail/sle-security-updates/2023-February/013838.html
E-Mail link for SUSE-SU-2023:0450-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1208102
SUSE Bug 1208102
https://www.suse.com/security/cve/CVE-2022-41862/
SUSE CVE CVE-2022-41862 page

Описание

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.

Затронутые продукты

Container suse/postgres:12:postgresql12-12.14-150200.8.41.1

Container suse/postgres:12:postgresql12-server-12.14-150200.8.41.1

SUSE Enterprise Storage 7.1:postgresql12-12.14-150200.8.41.1

SUSE Enterprise Storage 7.1:postgresql12-contrib-12.14-150200.8.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-41862.html
CVE-2022-41862
https://bugzilla.suse.com/1208102
SUSE Bug 1208102

SUSE-SU-2023:0450-1

Описание

Список пакетов

Container suse/postgres:12

SUSE Enterprise Storage 7

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Linux Enterprise Server for SAP Applications 15 SP3

openSUSE Leap 15.4

Ссылки

Уязвимость: CVE-2022-41862

Описание

Затронутые продукты

Ссылки