Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:01766-1

Опубликовано: 30 мая 2025
Источник: suse-cvrf

Описание

Security update for postgresql16

This update for postgresql16 fixes the following issues:

Upgrade to 16.9:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Changelog:

https://www.postgresql.org/docs/release/16.9/

Список пакетов

Container suse/manager/5.0/x86_64/server-migration-14-16:latest
postgresql16-16.9-150600.16.18.1
postgresql16-contrib-16.9-150600.16.18.1
postgresql16-server-16.9-150600.16.18.1
Container suse/manager/5.0/x86_64/server:latest
postgresql16-16.9-150600.16.18.1
postgresql16-contrib-16.9-150600.16.18.1
postgresql16-server-16.9-150600.16.18.1
Container suse/multi-linux-manager/5.1/x86_64/server-migration-14-16:latest
postgresql16-16.9-150600.16.18.1
postgresql16-contrib-16.9-150600.16.18.1
postgresql16-server-16.9-150600.16.18.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest
postgresql16-16.9-150600.16.18.1
Container suse/postgres:16
postgresql16-16.9-150600.16.18.1
postgresql16-server-16.9-150600.16.18.1
Container suse/postgres:16.14
postgresql16-16.9-150600.16.18.1
postgresql16-contrib-16.9-150600.16.18.1
postgresql16-server-16.9-150600.16.18.1
Image server-database-migration-image
postgresql16-16.9-150600.16.18.1
postgresql16-contrib-16.9-150600.16.18.1
postgresql16-server-16.9-150600.16.18.1
Image server-migration-14-16-image
postgresql16-16.9-150600.16.18.1
postgresql16-contrib-16.9-150600.16.18.1
postgresql16-server-16.9-150600.16.18.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
postgresql16-16.9-150600.16.18.1
SUSE Linux Enterprise Module for Package Hub 15 SP6
postgresql16-llvmjit-16.9-150600.16.18.1
postgresql16-test-16.9-150600.16.18.1
SUSE Linux Enterprise Module for Server Applications 15 SP6
postgresql16-contrib-16.9-150600.16.18.1
postgresql16-devel-16.9-150600.16.18.1
postgresql16-docs-16.9-150600.16.18.1
postgresql16-plperl-16.9-150600.16.18.1
postgresql16-plpython-16.9-150600.16.18.1
postgresql16-pltcl-16.9-150600.16.18.1
postgresql16-server-16.9-150600.16.18.1
postgresql16-server-devel-16.9-150600.16.18.1
openSUSE Leap 15.6
postgresql16-16.9-150600.16.18.1
postgresql16-contrib-16.9-150600.16.18.1
postgresql16-devel-16.9-150600.16.18.1
postgresql16-docs-16.9-150600.16.18.1
postgresql16-llvmjit-16.9-150600.16.18.1
postgresql16-llvmjit-devel-16.9-150600.16.18.1
postgresql16-plperl-16.9-150600.16.18.1
postgresql16-plpython-16.9-150600.16.18.1
postgresql16-pltcl-16.9-150600.16.18.1
postgresql16-server-16.9-150600.16.18.1
postgresql16-server-devel-16.9-150600.16.18.1
postgresql16-test-16.9-150600.16.18.1

Ссылки

Описание

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Затронутые продукты
Container suse/manager/5.0/x86_64/server-migration-14-16:latest:postgresql16-16.9-150600.16.18.1
Container suse/manager/5.0/x86_64/server-migration-14-16:latest:postgresql16-contrib-16.9-150600.16.18.1
Container suse/manager/5.0/x86_64/server-migration-14-16:latest:postgresql16-server-16.9-150600.16.18.1
Container suse/manager/5.0/x86_64/server:latest:postgresql16-16.9-150600.16.18.1
Ссылки