Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:01786-2

Опубликовано: 11 авг. 2025
Источник: suse-cvrf

Описание

Security update for postgresql14

This update for postgresql14 fixes the following issues:

Upgrade to 14.18:

  • CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)

Список пакетов

Image SLES15-SP4-Manager-Server-4-3-BYOS
postgresql14-14.18-150200.5.58.1
postgresql14-contrib-14.18-150200.5.58.1
postgresql14-server-14.18-150200.5.58.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
postgresql14-14.18-150200.5.58.1
postgresql14-contrib-14.18-150200.5.58.1
postgresql14-server-14.18-150200.5.58.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
postgresql14-14.18-150200.5.58.1
postgresql14-contrib-14.18-150200.5.58.1
postgresql14-server-14.18-150200.5.58.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
postgresql14-14.18-150200.5.58.1
postgresql14-contrib-14.18-150200.5.58.1
postgresql14-server-14.18-150200.5.58.1
SUSE Linux Enterprise Module for Package Hub 15 SP3
postgresql14-llvmjit-14.18-150200.5.58.1
postgresql14-test-14.18-150200.5.58.1
SUSE Linux Enterprise Module for Package Hub 15 SP4
postgresql14-llvmjit-14.18-150200.5.58.1
postgresql14-llvmjit-devel-14.18-150200.5.58.1
postgresql14-test-14.18-150200.5.58.1
SUSE Linux Enterprise Module for Package Hub 15 SP5
postgresql14-llvmjit-14.18-150200.5.58.1
postgresql14-test-14.18-150200.5.58.1

Ссылки

Описание

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Затронутые продукты
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:postgresql14-14.18-150200.5.58.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:postgresql14-contrib-14.18-150200.5.58.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:postgresql14-server-14.18-150200.5.58.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:postgresql14-14.18-150200.5.58.1
Ссылки