Описание
Security update for postgresql15
This update for postgresql15 fixes the following issues:
Upgrade to 15.13:
- CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)
Changelog:
Список пакетов
Container private-registry/harbor-db:latest
postgresql15-15.13-150600.16.17.1
postgresql15-server-15.13-150600.16.17.1
SUSE Linux Enterprise Module for Legacy 15 SP6
postgresql15-15.13-150600.16.17.1
postgresql15-contrib-15.13-150600.16.17.1
postgresql15-devel-15.13-150600.16.17.1
postgresql15-docs-15.13-150600.16.17.1
postgresql15-plperl-15.13-150600.16.17.1
postgresql15-plpython-15.13-150600.16.17.1
postgresql15-pltcl-15.13-150600.16.17.1
postgresql15-server-15.13-150600.16.17.1
postgresql15-server-devel-15.13-150600.16.17.1
openSUSE Leap 15.6
postgresql15-15.13-150600.16.17.1
postgresql15-contrib-15.13-150600.16.17.1
postgresql15-devel-15.13-150600.16.17.1
postgresql15-docs-15.13-150600.16.17.1
postgresql15-llvmjit-15.13-150600.16.17.1
postgresql15-llvmjit-devel-15.13-150600.16.17.1
postgresql15-plperl-15.13-150600.16.17.1
postgresql15-plpython-15.13-150600.16.17.1
postgresql15-pltcl-15.13-150600.16.17.1
postgresql15-server-15.13-150600.16.17.1
postgresql15-server-devel-15.13-150600.16.17.1
postgresql15-test-15.13-150600.16.17.1
Ссылки
- Link for SUSE-SU-2025:01748-1
- E-Mail link for SUSE-SU-2025:01748-1
- SUSE Security Ratings
- SUSE Bug 1242931
- SUSE CVE CVE-2025-4207 page
Описание
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.
Затронутые продукты
Container private-registry/harbor-db:latest:postgresql15-15.13-150600.16.17.1
Container private-registry/harbor-db:latest:postgresql15-server-15.13-150600.16.17.1
SUSE Linux Enterprise Module for Legacy 15 SP6:postgresql15-15.13-150600.16.17.1
SUSE Linux Enterprise Module for Legacy 15 SP6:postgresql15-contrib-15.13-150600.16.17.1
Ссылки
- CVE-2025-4207
- SUSE Bug 1242931