Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

suse-cvrf Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

SUSE-SU-2025:01750-1

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 29 мая 2025
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: suse-cvrf

ОписаниС

Security update for postgresql13

This update for postgresql13 fixes the following issues:

Upgrade to 13.21:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/13.21/

Бписок ΠΏΠ°ΠΊΠ΅Ρ‚ΠΎΠ²

SUSE Linux Enterprise Server 12 SP5-LTSS
postgresql13-13.21-3.63.1
postgresql13-contrib-13.21-3.63.1
postgresql13-devel-13.21-3.63.1
postgresql13-docs-13.21-3.63.1
postgresql13-plperl-13.21-3.63.1
postgresql13-plpython-13.21-3.63.1
postgresql13-pltcl-13.21-3.63.1
postgresql13-server-13.21-3.63.1
postgresql13-server-devel-13.21-3.63.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
postgresql13-13.21-3.63.1
postgresql13-contrib-13.21-3.63.1
postgresql13-devel-13.21-3.63.1
postgresql13-docs-13.21-3.63.1
postgresql13-plperl-13.21-3.63.1
postgresql13-plpython-13.21-3.63.1
postgresql13-pltcl-13.21-3.63.1
postgresql13-server-13.21-3.63.1
postgresql13-server-devel-13.21-3.63.1

Бсылки

ОписаниС

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Π—Π°Ρ‚Ρ€ΠΎΠ½ΡƒΡ‚Ρ‹Π΅ ΠΏΡ€ΠΎΠ΄ΡƒΠΊΡ‚Ρ‹
SUSE Linux Enterprise Server 12 SP5-LTSS:postgresql13-13.21-3.63.1
SUSE Linux Enterprise Server 12 SP5-LTSS:postgresql13-contrib-13.21-3.63.1
SUSE Linux Enterprise Server 12 SP5-LTSS:postgresql13-devel-13.21-3.63.1
SUSE Linux Enterprise Server 12 SP5-LTSS:postgresql13-docs-13.21-3.63.1
Бсылки
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ SUSE-SU-2025:01750-1