Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

SUSE: 2023:2713-1 Moderate Security Update for Postgres SQL Injection

suse
Calendar Grey August 18, 2023
Dist Suse Esm H88
SUSE Container Update Notice: Addressing SQL vulnerabilities and reinforcing data protection for suse/mysql containers.
The container suse/postgres was updated

Summary

Advisory ID: SUSE-SU-2023:3347-1 Released: Thu Aug 17 14:39:10 2023 Summary: Security update for postgresql15 Type: security Severity: moderate Advisory ID: SUSE-SU-2023:3348-1 Released: Thu Aug 17 14:41:20 2023 Summary: Security update for postgresql15 Type: security Severity: moderate

References

References : 1214059 1214059 1214061 CVE-2023-39417 CVE-2023-39417 CVE-2023-39418

1214059,1214061,CVE-2023-39417,CVE-2023-39418

This update for postgresql15 fixes the following issues:

- Update to 15.4

- CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059)

- CVE-2023-39418: Fix MERGE to enforce row security. (bsc#1214061)

1214059,CVE-2023-39417

This update for postgresql15 fixes the following issues:

- Update to 14.9

- CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059)

The following package changes have been done:

- libpq5-15.4-150200.5.12.1 updated

- postgresql14-14.9-150200.5.29.1 updated

- postgresql14-server-14.9-150200.5.29.1 updated

Container Advisory ID : SUSE-CU-2023:2713-1
Container Tags : suse/postgres:14 , suse/postgres:14-22.40 , suse/postgres:14.9 , suse/postgres:14.9-22.40
Container Release : 22.40
Severity : moderate
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here