Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
100
security advisoryupdatemoderate severitySUSE Linux 15-SP3: Issues Resolved in PostgreSQL13 - SUSE-SU-2021:1785-2
An update that solves three vulnerabilities and has three fixes is now available. . SUSE Security Update: Security update for postgresql13 ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1785-2 Rating: moderate References: #1179945 #1183118 #1183168 #1185924 #1185925 #1185926 Cross-References: CVE-2021-32027 CVE-2021-32028 CVE-2021-32029 CVSS scores: CVE-2021-32027 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-32027 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-32028 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-32029 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. Description: This update for postgresql13 fixes the following issues: - Upgrade to version 13.3: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924). - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925). - CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING outputs for joined cross-partition updates (bsc#1185926). - Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168). - Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118). - Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945). Patch Instructions: To install this SUSESecurity Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2021-1785=1 Package List: - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): postgresql13-test-13.3-5.10.1 References: https://www.suse.com/security/cve/CVE-2021-32027.html https://www.suse.com/security/cve/CVE-2021-32028.html https://www.suse.com/security/cve/CVE-2021-32029.html https://bugzilla.suse.com/1179945 https://bugzilla.suse.com/1183118 https://bugzilla.suse.com/1183168 https://bugzilla.suse.com/1185924 https://bugzilla.suse.com/1185925 https://bugzilla.suse.com/1185926 . The latest enhancement for postgresql13 addresses several vulnerabilities rated as moderate risk within SUSE Linux Enterprise offerings.. Postgresql13 Update, SUSE Security, Vulnerability Fixes, Package Hub Updates. . LinuxSecurity.com Team
Jul 11, 2021
SuSE
98
security advisorybuffer overrunRed Hat Enterprise LinuxRed Hat 8.2: RHSA-2021-2389-01 Critical Memory Disclosure Fix
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: postgresql:12 security update Advisory ID: RHSA-2021:2389-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:2389 Issue date: 2021-06-14 CVE Names: CVE-2021-3393 CVE-2021-32027 CVE-2021-32028 CVE-2021-32029 ==================================================================== 1. Summary: An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v. 8.2) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: PostgreSQL is an advanced object-relational database management system (DBMS). The following packages have been upgraded to a later upstream version: postgresql (12.7) Security Fix(es): * postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027) * postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028) * postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING (CVE-2021-32029) * postgresql: Partition constraint violation errors leak values of denied columns (CVE-2021-3393) For more details about the security issue(s), including the impact, a CVSS score,acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. 5. Bugs fixed (https://bugzilla.redhat.com/): 1924005 - CVE-2021-3393 postgresql: Partition constraint violation errors leak values of denied columns 1956876 - CVE-2021-32027 postgresql: Buffer overrun from integer overflow in array subscripting calculations 1956877 - CVE-2021-32028 postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE 1956883 - CVE-2021-32029 postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING 6. Package List: Red Hat Enterprise Linux AppStream EUS (v.8.2): Source: pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src.rpm postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.src.rpm postgresql-12.7-1.module+el8.2.0+11251+7a3cc531.src.rpm aarch64: pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.aarch64.rpm pgaudit-debuginfo-1.4.0-4.module+el8.2.0+9043+1dbb5661.aarch64.rpm pgaudit-debugsource-1.4.0-4.module+el8.2.0+9043+1dbb5661.aarch64.rpm postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.aarch64.rpm postgres-decoderbufs-debuginfo-0.10.0-2.module+el8.2.0+9043+1dbb5661.aarch64.rpm postgres-decoderbufs-debugsource-0.10.0-2.module+el8.2.0+9043+1dbb5661.aarch64.rpm postgresql-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-contrib-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-contrib-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-debugsource-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-docs-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-docs-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-plperl-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-plperl-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-plpython3-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-plpython3-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-pltcl-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-pltcl-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-server-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-server-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-server-devel-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-server-devel-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-static-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-test-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-test-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-upgrade-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-upgrade-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-upgrade-devel-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm postgresql-upgrade-devel-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.aarch64.rpm noarch: postgresql-test-rpm-macros-12.7-1.module+el8.2.0+11251+7a3cc531.noarch.rpm ppc64le: pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.ppc64le.rpm pgaudit-debuginfo-1.4.0-4.module+el8.2.0+9043+1dbb5661.ppc64le.rpm pgaudit-debugsource-1.4.0-4.module+el8.2.0+9043+1dbb5661.ppc64le.rpm postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.ppc64le.rpm postgres-decoderbufs-debuginfo-0.10.0-2.module+el8.2.0+9043+1dbb5661.ppc64le.rpm postgres-decoderbufs-debugsource-0.10.0-2.module+el8.2.0+9043+1dbb5661.ppc64le.rpm postgresql-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-contrib-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-contrib-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-debugsource-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-docs-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-docs-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-plperl-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-plperl-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-plpython3-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-plpython3-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-pltcl-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-pltcl-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-server-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-server-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-server-devel-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-server-devel-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-static-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-test-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-test-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-upgrade-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-upgrade-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-upgrade-devel-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm postgresql-upgrade-devel-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.ppc64le.rpm s390x: pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.s390x.rpm pgaudit-debuginfo-1.4.0-4.module+el8.2.0+9043+1dbb5661.s390x.rpm pgaudit-debugsource-1.4.0-4.module+el8.2.0+9043+1dbb5661.s390x.rpm postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.s390x.rpm postgres-decoderbufs-debuginfo-0.10.0-2.module+el8.2.0+9043+1dbb5661.s390x.rpm postgres-decoderbufs-debugsource-0.10.0-2.module+el8.2.0+9043+1dbb5661.s390x.rpm postgresql-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-contrib-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-contrib-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-debugsource-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-docs-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-docs-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-plperl-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-plperl-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-plpython3-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-plpython3-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-pltcl-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-pltcl-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-server-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-server-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-server-devel-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-server-devel-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-static-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-test-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-test-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-upgrade-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-upgrade-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-upgrade-devel-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm postgresql-upgrade-devel-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.s390x.rpm x86_64: pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64.rpm pgaudit-debuginfo-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64.rpm pgaudit-debugsource-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64.rpm postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.x86_64.rpm postgres-decoderbufs-debuginfo-0.10.0-2.module+el8.2.0+9043+1dbb5661.x86_64.rpm postgres-decoderbufs-debugsource-0.10.0-2.module+el8.2.0+9043+1dbb5661.x86_64.rpm postgresql-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-contrib-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-contrib-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-debugsource-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-docs-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-docs-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-plperl-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-plperl-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-plpython3-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-plpython3-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-pltcl-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-pltcl-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-server-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-server-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-server-devel-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-server-devel-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-static-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-test-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-test-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-upgrade-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-upgrade-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-upgrade-devel-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm postgresql-upgrade-devel-debuginfo-12.7-1.module+el8.2.0+11251+7a3cc531.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-3393 https://access.redhat.com/security/cve/CVE-2021-32027 https://access.redhat.com/security/cve/CVE-2021-32028 https://access.redhat.com/security/cve/CVE-2021-32029 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYMcZdtzjgjWX9erEAQi3Xg/+PXWPkpdASXaAjojsfybNq4TLQAe1pisY el9BE1y4cvR7ehWyOpltqkc7t7QRDE8IsZCZIrfPJy1XdycXZdSuGxdspFsBCEQN FMcYZLU/0xOO+z6ilHiCPC6BHX/Qu5tqD7TvtvER8k987E7g81H8FVwmCEpeag16 jyuCuYdTTmdhPmKsyNzsG407u0T0cbh6ecMVDjaKllWlpgpyZTEjxW2J6jJf4V5X K11oMkiXWwpjEfdjVdhDT38qBGxQYAcCTpCPh9KUzJY1FoQEnlWxZa9jHb8Ev+q0 Fu18Kb1Zf92GemmTN15hYa/ktf85TaOJBWbmYcUPZn/G4JAZ5ZmrqNsTVaC//he+ awNCG97B8ecaUl/NzHSNO8vXE//7efUojMwbP8pRWumAg8BdX/ycZWE2zbOuHYEA hihCibmDCLE2DJbrxteHF/fIQryE16AUOx4NH8UXj3ftI02m3n2JH4Pss0bSp8sp YszXQ9RFSP+mIZv68pL+Qtnc2FPZBgsY2U0fuIt5vtnlcCTQD5o0Vp4jmRguV5/D 8Rc68toKoqKNeJIPXV85Zch/Gt2PpSo/um4SzdEaYiSDKLW48tI86oA6H/RlFjRL Wwkdi2U5L/tO9glcx/AvPsI+IlsyCnfgw2SNV3VOYcwlrmor28eWxKIG3fIcND6X nhW6hcr4YSk=6YhU -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jun 14, 2021
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!