Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 10 articles for you...
100
security advisorybuffer overflowpatchSUSE: 2022:2946-1 Important: Postgresql10 Buffer Overflow Threat
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2946-1 Rating: important References: #1202368 Cross-References: CVE-2022-2625 CVSS scores: CVE-2022-2625 (NVD) : 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2022-2625 (SUSE): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Module for Legacy Software 15-SP3 SUSE Linux Enterprise Server SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for postgresql10 fixes the following issues: - Upgrade to 10.22: - CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2946=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2946=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2946=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2946=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2946=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2946=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-2946=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2946=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2946=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-2946=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-2946=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP3-2022-2946=1 - SUSE Linux Enterprise High Performance Computing15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2946=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2946=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-2946=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-2946=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2946=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-2946=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-llvmjit-devel-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 postgresql10-test-10.22-150100.8.50.1 - openSUSE Leap 15.4 (noarch): postgresql10-docs-10.22-150100.8.50.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 postgresql10-test-10.22-150100.8.50.1 - openSUSE Leap 15.3 (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Manager Server 4.1 (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Manager Retail Branch Server 4.1 (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Manager Proxy 4.1 (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Manager Proxy 4.1 (x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Linux EnterpriseServer 15-SP2-BCL (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3 (aarch64 ppc64le s390x x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Enterprise Storage 7 (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE Enterprise Storage 6 (noarch): postgresql10-docs-10.22-150100.8.50.1 - SUSE CaaS Platform 4.0 (x86_64): postgresql10-10.22-150100.8.50.1 postgresql10-contrib-10.22-150100.8.50.1 postgresql10-contrib-debuginfo-10.22-150100.8.50.1 postgresql10-debuginfo-10.22-150100.8.50.1 postgresql10-debugsource-10.22-150100.8.50.1 postgresql10-devel-10.22-150100.8.50.1 postgresql10-devel-debuginfo-10.22-150100.8.50.1 postgresql10-plperl-10.22-150100.8.50.1 postgresql10-plperl-debuginfo-10.22-150100.8.50.1 postgresql10-plpython-10.22-150100.8.50.1 postgresql10-plpython-debuginfo-10.22-150100.8.50.1 postgresql10-pltcl-10.22-150100.8.50.1 postgresql10-pltcl-debuginfo-10.22-150100.8.50.1 postgresql10-server-10.22-150100.8.50.1 postgresql10-server-debuginfo-10.22-150100.8.50.1 - SUSE CaaS Platform 4.0 (noarch): postgresql10-docs-10.22-150100.8.50.1 References: https://www.suse.com/security/cve/CVE-2022-2625.html https://bugzilla.suse.com/1202368 . Important security patch addresses a flaw in postgresql10 for SUSE systems. Implement updates as suggested to maintain protection.. postgresql10, security update, SUSE security advisory, important patches. . Severity: Important. LinuxSecurity.com Team
Aug 31, 2022
•Important
SuSE
100
security advisorysecurity updateimportantSUSE 12: SP5 Important: postgresql10 Security Update CVE-2022-2625
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2914-1 Rating: important References: #1202368 Cross-References: CVE-2022-2625 CVSS scores: CVE-2022-2625 (NVD) : 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2022-2625 (SUSE): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Server 12-SP2-BCL SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for postgresql10 fixes the following issues: - Upgrade to 10.22: - CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-2914=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-2914=1 - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-2914=1 - SUSE Linux Enterprise Server for SAP12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-2914=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-2914=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-2914=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2022-2914=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2022-2914=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (noarch): postgresql10-docs-10.22-4.31.1 - SUSE OpenStack Cloud Crowbar 9 (x86_64): postgresql10-10.22-4.31.1 postgresql10-contrib-10.22-4.31.1 postgresql10-contrib-debuginfo-10.22-4.31.1 postgresql10-debuginfo-10.22-4.31.1 postgresql10-debugsource-10.22-4.31.1 postgresql10-plperl-10.22-4.31.1 postgresql10-plperl-debuginfo-10.22-4.31.1 postgresql10-plpython-10.22-4.31.1 postgresql10-plpython-debuginfo-10.22-4.31.1 postgresql10-pltcl-10.22-4.31.1 postgresql10-pltcl-debuginfo-10.22-4.31.1 postgresql10-server-10.22-4.31.1 postgresql10-server-debuginfo-10.22-4.31.1 - SUSE OpenStack Cloud 9 (x86_64): postgresql10-10.22-4.31.1 postgresql10-contrib-10.22-4.31.1 postgresql10-contrib-debuginfo-10.22-4.31.1 postgresql10-debuginfo-10.22-4.31.1 postgresql10-debugsource-10.22-4.31.1 postgresql10-plperl-10.22-4.31.1 postgresql10-plperl-debuginfo-10.22-4.31.1 postgresql10-plpython-10.22-4.31.1 postgresql10-plpython-debuginfo-10.22-4.31.1 postgresql10-pltcl-10.22-4.31.1 postgresql10-pltcl-debuginfo-10.22-4.31.1 postgresql10-server-10.22-4.31.1 postgresql10-server-debuginfo-10.22-4.31.1 - SUSE OpenStack Cloud 9 (noarch): postgresql10-docs-10.22-4.31.1 - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): postgresql10-debugsource-10.22-4.31.1 postgresql10-devel-10.22-4.31.1 postgresql10-devel-debuginfo-10.22-4.31.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): postgresql10-10.22-4.31.1 postgresql10-contrib-10.22-4.31.1 postgresql10-contrib-debuginfo-10.22-4.31.1 postgresql10-debuginfo-10.22-4.31.1 postgresql10-debugsource-10.22-4.31.1 postgresql10-plperl-10.22-4.31.1 postgresql10-plperl-debuginfo-10.22-4.31.1 postgresql10-plpython-10.22-4.31.1 postgresql10-plpython-debuginfo-10.22-4.31.1 postgresql10-pltcl-10.22-4.31.1 postgresql10-pltcl-debuginfo-10.22-4.31.1 postgresql10-server-10.22-4.31.1 postgresql10-server-debuginfo-10.22-4.31.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (noarch): postgresql10-docs-10.22-4.31.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): postgresql10-10.22-4.31.1 postgresql10-contrib-10.22-4.31.1 postgresql10-contrib-debuginfo-10.22-4.31.1 postgresql10-debuginfo-10.22-4.31.1 postgresql10-debugsource-10.22-4.31.1 postgresql10-plperl-10.22-4.31.1 postgresql10-plperl-debuginfo-10.22-4.31.1 postgresql10-plpython-10.22-4.31.1 postgresql10-plpython-debuginfo-10.22-4.31.1 postgresql10-pltcl-10.22-4.31.1 postgresql10-pltcl-debuginfo-10.22-4.31.1 postgresql10-server-10.22-4.31.1 postgresql10-server-debuginfo-10.22-4.31.1 - SUSE Linux Enterprise Server 12-SP5 (noarch): postgresql10-docs-10.22-4.31.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): postgresql10-10.22-4.31.1 postgresql10-contrib-10.22-4.31.1 postgresql10-contrib-debuginfo-10.22-4.31.1 postgresql10-debuginfo-10.22-4.31.1 postgresql10-debugsource-10.22-4.31.1 postgresql10-plperl-10.22-4.31.1 postgresql10-plperl-debuginfo-10.22-4.31.1 postgresql10-plpython-10.22-4.31.1 postgresql10-plpython-debuginfo-10.22-4.31.1 postgresql10-pltcl-10.22-4.31.1 postgresql10-pltcl-debuginfo-10.22-4.31.1 postgresql10-server-10.22-4.31.1 postgresql10-server-debuginfo-10.22-4.31.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (noarch): postgresql10-docs-10.22-4.31.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): postgresql10-10.22-4.31.1 postgresql10-contrib-10.22-4.31.1 postgresql10-contrib-debuginfo-10.22-4.31.1 postgresql10-debuginfo-10.22-4.31.1 postgresql10-debugsource-10.22-4.31.1 postgresql10-plperl-10.22-4.31.1 postgresql10-plperl-debuginfo-10.22-4.31.1 postgresql10-plpython-10.22-4.31.1 postgresql10-plpython-debuginfo-10.22-4.31.1 postgresql10-pltcl-10.22-4.31.1 postgresql10-pltcl-debuginfo-10.22-4.31.1 postgresql10-server-10.22-4.31.1 postgresql10-server-debuginfo-10.22-4.31.1 - SUSE Linux Enterprise Server 12-SP3-BCL (noarch): postgresql10-docs-10.22-4.31.1 - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): postgresql10-docs-10.22-4.31.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): postgresql10-10.22-4.31.1 postgresql10-contrib-10.22-4.31.1 postgresql10-contrib-debuginfo-10.22-4.31.1 postgresql10-debuginfo-10.22-4.31.1 postgresql10-debugsource-10.22-4.31.1 postgresql10-plperl-10.22-4.31.1 postgresql10-plperl-debuginfo-10.22-4.31.1 postgresql10-plpython-10.22-4.31.1 postgresql10-plpython-debuginfo-10.22-4.31.1 postgresql10-pltcl-10.22-4.31.1 postgresql10-pltcl-debuginfo-10.22-4.31.1 postgresql10-server-10.22-4.31.1 postgresql10-server-debuginfo-10.22-4.31.1 References: https://www.suse.com/security/cve/CVE-2022-2625.html https://bugzilla.suse.com/1202368 . This update resolves a critical security concern for postgresql10 in SUSE, offering necessary patch instructions and details.. SUSE Security Update, Postgresql 10, Software Patch, Update Instructions. . Severity: Important. LinuxSecurity.com Team
Aug 26, 2022
•Important
SuSE
100
security advisoryupdatepatchSUSE: 2022:1890-1 Important: PostgreSQL 10 Security Update
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:1890-1 Rating: important References: #1199475 Cross-References: CVE-2022-1552 CVSS scores: CVE-2022-1552 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Module for Legacy Software 15-SP3 SUSE Linux Enterprise Server SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update forpostgresql10 fixes the following issues: - CVE-2022-1552: Confine additional operations within "security restricted operation" sandboxes (bsc#1199475). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-1890=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-1890=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1890=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1890=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1890=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1890=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-1890=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1890=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1890=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-1890=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2022-1890=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP3-2022-1890=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1890=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1890=1 - SUSELinux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-1890=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-1890=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-1890=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-1890=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-llvmjit-devel-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 postgresql10-test-10.21-150100.8.47.1 - openSUSE Leap 15.4 (noarch): postgresql10-docs-10.21-150100.8.47.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 postgresql10-test-10.21-150100.8.47.1 - openSUSE Leap 15.3 (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Manager Server 4.1 (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Manager Retail Branch Server 4.1 (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Manager Proxy 4.1 (x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Manager Proxy 4.1 (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3 (aarch64 ppc64le s390x x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE LinuxEnterprise High Performance Computing 15-SP1-LTSS (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Enterprise Storage 7 (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 - SUSE Enterprise Storage 6 (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE CaaS Platform 4.0 (noarch): postgresql10-docs-10.21-150100.8.47.1 - SUSE CaaS Platform 4.0 (x86_64): postgresql10-10.21-150100.8.47.1 postgresql10-contrib-10.21-150100.8.47.1 postgresql10-contrib-debuginfo-10.21-150100.8.47.1 postgresql10-debuginfo-10.21-150100.8.47.1 postgresql10-debugsource-10.21-150100.8.47.1 postgresql10-devel-10.21-150100.8.47.1 postgresql10-devel-debuginfo-10.21-150100.8.47.1 postgresql10-plperl-10.21-150100.8.47.1 postgresql10-plperl-debuginfo-10.21-150100.8.47.1 postgresql10-plpython-10.21-150100.8.47.1 postgresql10-plpython-debuginfo-10.21-150100.8.47.1 postgresql10-pltcl-10.21-150100.8.47.1 postgresql10-pltcl-debuginfo-10.21-150100.8.47.1 postgresql10-server-10.21-150100.8.47.1 postgresql10-server-debuginfo-10.21-150100.8.47.1 References: https://www.suse.com/security/cve/CVE-2022-1552.html https://bugzilla.suse.com/1199475 . Update addressing the security vulnerability CVE-2022-1552 in PostgreSQL 10 for SUSE distribution is now released, carrying a critical designation.. PostgreSQL 10 Security Patch, SUSE Update, Security Vulnerability Fix. .Severity: Important. LinuxSecurity.com Team
May 31, 2022
•Important
SuSE
202
security advisorypatchimportantopenSUSE: 2021:1584-1 Important: Encryption Issues in Postgresql10
An update that fixes two vulnerabilities is now available. . openSUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1584-1 Rating: important References: #1192516 Cross-References: CVE-2021-23214 CVE-2021-23222 CVSS scores: CVE-2021-23214 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-23222 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for postgresql10 fixes the following issues: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516). - CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-1584=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): postgresql10-10.19-lp152.2.27.1 postgresql10-contrib-10.19-lp152.2.27.1 postgresql10-contrib-debuginfo-10.19-lp152.2.27.1 postgresql10-debuginfo-10.19-lp152.2.27.1 postgresql10-debugsource-10.19-lp152.2.27.1 postgresql10-devel-10.19-lp152.2.27.1 postgresql10-devel-debuginfo-10.19-lp152.2.27.1 postgresql10-plperl-10.19-lp152.2.27.1 postgresql10-plperl-debuginfo-10.19-lp152.2.27.1 postgresql10-plpython-10.19-lp152.2.27.1 postgresql10-plpython-debuginfo-10.19-lp152.2.27.1 postgresql10-pltcl-10.19-lp152.2.27.1 postgresql10-pltcl-debuginfo-10.19-lp152.2.27.1 postgresql10-server-10.19-lp152.2.27.1 postgresql10-server-debuginfo-10.19-lp152.2.27.1 postgresql10-test-10.19-lp152.2.27.1 - openSUSE Leap 15.2 (noarch): postgresql10-docs-10.19-lp152.2.27.1 References: https://www.suse.com/security/cve/CVE-2021-23214.html https://www.suse.com/security/cve/CVE-2021-23222.html https://bugzilla.suse.com/1192516 . Urgent updates released for severe data protection vulnerabilities in PostgreSQL 10 on openSUSE. Affected users must take prompt remedial measures.. openSUSE Security Update, Encryption Issue, PostgreSQL 10 Update. . Severity: Important. LinuxSecurity.com Team
Dec 14, 2021
•Important
OpenSUSE
100
security advisoryimportantSUSESUSE: 2021:4059-2 Critical: MySQL 8 Security Vulnerabilities
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:4058-1 Rating: important References: #1192516 Cross-References: CVE-2021-23214 CVE-2021-23222 CVSS scores: CVE-2021-23214 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-23222 (SUSE): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Module for Server Applications 15-SP2 SUSE Linux Enterprise Module for Legacy Software 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Enterprise Storage 6 SUSE CaaS Platform 4.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for postgresql10 fixes the following issues: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516). - CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2021-4058=1 - SUSELinux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-4058=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2021-4058=1 - SUSE Linux Enterprise Module for Server Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP2-2021-4058=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP3-2021-4058=1 - SUSE Linux Enterprise Module for Basesystem 15-SP2: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2021-4058=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-4058=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-4058=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2021-4058=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): postgresql10-10.19-8.41.1 postgresql10-contrib-10.19-8.41.1 postgresql10-contrib-debuginfo-10.19-8.41.1 postgresql10-debuginfo-10.19-8.41.1 postgresql10-debugsource-10.19-8.41.1 postgresql10-devel-10.19-8.41.1 postgresql10-devel-debuginfo-10.19-8.41.1 postgresql10-plperl-10.19-8.41.1 postgresql10-plperl-debuginfo-10.19-8.41.1 postgresql10-plpython-10.19-8.41.1 postgresql10-plpython-debuginfo-10.19-8.41.1 postgresql10-pltcl-10.19-8.41.1 postgresql10-pltcl-debuginfo-10.19-8.41.1 postgresql10-server-10.19-8.41.1 postgresql10-server-debuginfo-10.19-8.41.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): postgresql10-docs-10.19-8.41.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): postgresql10-10.19-8.41.1 postgresql10-contrib-10.19-8.41.1 postgresql10-contrib-debuginfo-10.19-8.41.1 postgresql10-debuginfo-10.19-8.41.1 postgresql10-debugsource-10.19-8.41.1 postgresql10-devel-10.19-8.41.1 postgresql10-devel-debuginfo-10.19-8.41.1 postgresql10-plperl-10.19-8.41.1 postgresql10-plperl-debuginfo-10.19-8.41.1 postgresql10-plpython-10.19-8.41.1 postgresql10-plpython-debuginfo-10.19-8.41.1 postgresql10-pltcl-10.19-8.41.1 postgresql10-pltcl-debuginfo-10.19-8.41.1 postgresql10-server-10.19-8.41.1 postgresql10-server-debuginfo-10.19-8.41.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): postgresql10-docs-10.19-8.41.1 - SUSE Linux Enterprise Server 15-SP1-BCL (noarch): postgresql10-docs-10.19-8.41.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): postgresql10-10.19-8.41.1 postgresql10-contrib-10.19-8.41.1 postgresql10-contrib-debuginfo-10.19-8.41.1 postgresql10-debuginfo-10.19-8.41.1 postgresql10-debugsource-10.19-8.41.1 postgresql10-devel-10.19-8.41.1 postgresql10-devel-debuginfo-10.19-8.41.1 postgresql10-plperl-10.19-8.41.1 postgresql10-plperl-debuginfo-10.19-8.41.1 postgresql10-plpython-10.19-8.41.1 postgresql10-plpython-debuginfo-10.19-8.41.1 postgresql10-pltcl-10.19-8.41.1 postgresql10-pltcl-debuginfo-10.19-8.41.1 postgresql10-server-10.19-8.41.1 postgresql10-server-debuginfo-10.19-8.41.1 - SUSE Linux Enterprise Module for Server Applications 15-SP2 (aarch64 ppc64le s390x x86_64): postgresql10-contrib-10.19-8.41.1 postgresql10-contrib-debuginfo-10.19-8.41.1 postgresql10-debuginfo-10.19-8.41.1 postgresql10-debugsource-10.19-8.41.1 postgresql10-devel-10.19-8.41.1 postgresql10-devel-debuginfo-10.19-8.41.1 postgresql10-plperl-10.19-8.41.1 postgresql10-plperl-debuginfo-10.19-8.41.1 postgresql10-plpython-10.19-8.41.1 postgresql10-plpython-debuginfo-10.19-8.41.1 postgresql10-pltcl-10.19-8.41.1 postgresql10-pltcl-debuginfo-10.19-8.41.1 postgresql10-server-10.19-8.41.1 postgresql10-server-debuginfo-10.19-8.41.1 - SUSE Linux Enterprise Module for Server Applications 15-SP2 (noarch): postgresql10-docs-10.19-8.41.1 - SUSE Linux Enterprise Module for Legacy Software 15-SP3 (aarch64 ppc64le s390x x86_64): postgresql10-10.19-8.41.1 postgresql10-contrib-10.19-8.41.1 postgresql10-contrib-debuginfo-10.19-8.41.1 postgresql10-debuginfo-10.19-8.41.1 postgresql10-debugsource-10.19-8.41.1 postgresql10-devel-10.19-8.41.1 postgresql10-devel-debuginfo-10.19-8.41.1 postgresql10-plperl-10.19-8.41.1 postgresql10-plperl-debuginfo-10.19-8.41.1 postgresql10-plpython-10.19-8.41.1 postgresql10-plpython-debuginfo-10.19-8.41.1 postgresql10-pltcl-10.19-8.41.1 postgresql10-pltcl-debuginfo-10.19-8.41.1 postgresql10-server-10.19-8.41.1 postgresql10-server-debuginfo-10.19-8.41.1 - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64): postgresql10-10.19-8.41.1 postgresql10-debuginfo-10.19-8.41.1 postgresql10-debugsource-10.19-8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): postgresql10-10.19-8.41.1 postgresql10-contrib-10.19-8.41.1 postgresql10-contrib-debuginfo-10.19-8.41.1 postgresql10-debuginfo-10.19-8.41.1 postgresql10-debugsource-10.19-8.41.1 postgresql10-devel-10.19-8.41.1 postgresql10-devel-debuginfo-10.19-8.41.1 postgresql10-plperl-10.19-8.41.1 postgresql10-plperl-debuginfo-10.19-8.41.1 postgresql10-plpython-10.19-8.41.1 postgresql10-plpython-debuginfo-10.19-8.41.1 postgresql10-pltcl-10.19-8.41.1 postgresql10-pltcl-debuginfo-10.19-8.41.1 postgresql10-server-10.19-8.41.1 postgresql10-server-debuginfo-10.19-8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): postgresql10-docs-10.19-8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): postgresql10-10.19-8.41.1 postgresql10-contrib-10.19-8.41.1 postgresql10-contrib-debuginfo-10.19-8.41.1 postgresql10-debuginfo-10.19-8.41.1 postgresql10-debugsource-10.19-8.41.1 postgresql10-devel-10.19-8.41.1 postgresql10-devel-debuginfo-10.19-8.41.1 postgresql10-plperl-10.19-8.41.1 postgresql10-plperl-debuginfo-10.19-8.41.1 postgresql10-plpython-10.19-8.41.1 postgresql10-plpython-debuginfo-10.19-8.41.1 postgresql10-pltcl-10.19-8.41.1 postgresql10-pltcl-debuginfo-10.19-8.41.1 postgresql10-server-10.19-8.41.1 postgresql10-server-debuginfo-10.19-8.41.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (noarch): postgresql10-docs-10.19-8.41.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): postgresql10-10.19-8.41.1 postgresql10-contrib-10.19-8.41.1 postgresql10-contrib-debuginfo-10.19-8.41.1 postgresql10-debuginfo-10.19-8.41.1 postgresql10-debugsource-10.19-8.41.1 postgresql10-devel-10.19-8.41.1 postgresql10-devel-debuginfo-10.19-8.41.1 postgresql10-plperl-10.19-8.41.1 postgresql10-plperl-debuginfo-10.19-8.41.1 postgresql10-plpython-10.19-8.41.1 postgresql10-plpython-debuginfo-10.19-8.41.1 postgresql10-pltcl-10.19-8.41.1 postgresql10-pltcl-debuginfo-10.19-8.41.1 postgresql10-server-10.19-8.41.1 postgresql10-server-debuginfo-10.19-8.41.1 - SUSE Enterprise Storage 6 (noarch): postgresql10-docs-10.19-8.41.1 - SUSE CaaS Platform 4.0 (noarch): postgresql10-docs-10.19-8.41.1 - SUSE CaaS Platform 4.0 (x86_64): postgresql10-10.19-8.41.1 postgresql10-contrib-10.19-8.41.1 postgresql10-contrib-debuginfo-10.19-8.41.1 postgresql10-debuginfo-10.19-8.41.1 postgresql10-debugsource-10.19-8.41.1 postgresql10-devel-10.19-8.41.1 postgresql10-devel-debuginfo-10.19-8.41.1 postgresql10-plperl-10.19-8.41.1 postgresql10-plperl-debuginfo-10.19-8.41.1 postgresql10-plpython-10.19-8.41.1 postgresql10-plpython-debuginfo-10.19-8.41.1 postgresql10-pltcl-10.19-8.41.1 postgresql10-pltcl-debuginfo-10.19-8.41.1 postgresql10-server-10.19-8.41.1 postgresql10-server-debuginfo-10.19-8.41.1 References: https://www.suse.com/security/cve/CVE-2021-23214.html https://www.suse.com/security/cve/CVE-2021-23222.html https://bugzilla.suse.com/1192516 . Crucial announcement regarding postgresql10 tackles significant concerns, notably in encrypted data management. Vital for safeguarding system integrity.. PostgreSQL Security Update, SUSE Patch Instructions, Encryption Fix. . Severity: Important. LinuxSecurity.com Team
Dec 14, 2021
•Important
SuSE
202
security advisorymoderateinteger overflowopenSUSE Leap 15.3: 2021:1970-1 Moderate: PostgreSQL10 Security Issue
An update that solves two vulnerabilities and has one errata is now available. . openSUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1970-1 Rating: moderate References: #1183168 #1185924 #1185925 Cross-References: CVE-2021-32027 CVE-2021-32028 CVSS scores: CVE-2021-32027 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-32027 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-32028 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for postgresql10 fixes the following issues: - Upgrade to version 10.17: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924). - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925). - Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-1970=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): postgresql10-10.17-8.35.1 postgresql10-contrib-10.17-8.35.1 postgresql10-contrib-debuginfo-10.17-8.35.1 postgresql10-debuginfo-10.17-8.35.1 postgresql10-debugsource-10.17-8.35.1 postgresql10-devel-10.17-8.35.1 postgresql10-devel-debuginfo-10.17-8.35.1 postgresql10-plperl-10.17-8.35.1 postgresql10-plperl-debuginfo-10.17-8.35.1 postgresql10-plpython-10.17-8.35.1 postgresql10-plpython-debuginfo-10.17-8.35.1 postgresql10-pltcl-10.17-8.35.1 postgresql10-pltcl-debuginfo-10.17-8.35.1 postgresql10-server-10.17-8.35.1 postgresql10-server-debuginfo-10.17-8.35.1 postgresql10-test-10.17-8.35.1 - openSUSE Leap 15.3 (noarch): postgresql10-docs-10.17-8.35.1 References: https://www.suse.com/security/cve/CVE-2021-32027.html https://www.suse.com/security/cve/CVE-2021-32028.html https://bugzilla.suse.com/1183168 https://bugzilla.suse.com/1185924 https://bugzilla.suse.com/1185925 . Discover critical security enhancements for openSUSE Leap 15.3, featuring patches addressing vulnerabilities in postgresql10.. PostgreSQL Update, openSUSE Security, System Update. . LinuxSecurity.com Team
Jul 10, 2021
OpenSUSE
100
security advisorymoderatesecurity issueSUSE: 2021:1782-1 Moderate: PostgreSQL 10 Integer Overflow Fix
An update that solves two vulnerabilities and has three fixes is now available. . SUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1782-1 Rating: moderate References: #1179945 #1183118 #1183168 #1185924 #1185925 Cross-References: CVE-2021-32027 CVE-2021-32028 CVSS scores: CVE-2021-32027 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-32028 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE Linux Enterprise Server 12-SP5 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for postgresql10 fixes the following issues: - Upgrade to version 10.17: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924). - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925). - Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168). - Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118). - Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-1782=1 - SUSE Linux Enterprise Server12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-1782=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): postgresql10-debugsource-10.17-4.16.4 postgresql10-devel-10.17-4.16.4 postgresql10-devel-debuginfo-10.17-4.16.4 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): postgresql10-10.17-4.16.4 postgresql10-contrib-10.17-4.16.4 postgresql10-contrib-debuginfo-10.17-4.16.4 postgresql10-debuginfo-10.17-4.16.4 postgresql10-debugsource-10.17-4.16.4 postgresql10-plperl-10.17-4.16.4 postgresql10-plperl-debuginfo-10.17-4.16.4 postgresql10-plpython-10.17-4.16.4 postgresql10-plpython-debuginfo-10.17-4.16.4 postgresql10-pltcl-10.17-4.16.4 postgresql10-pltcl-debuginfo-10.17-4.16.4 postgresql10-server-10.17-4.16.4 postgresql10-server-debuginfo-10.17-4.16.4 - SUSE Linux Enterprise Server 12-SP5 (noarch): postgresql10-docs-10.17-4.16.4 References: https://www.suse.com/security/cve/CVE-2021-32027.html https://www.suse.com/security/cve/CVE-2021-32028.html https://bugzilla.suse.com/1179945 https://bugzilla.suse.com/1183118 https://bugzilla.suse.com/1183168 https://bugzilla.suse.com/1185924 https://bugzilla.suse.com/1185925 . Explore the new SUSE Security Patch for postgresql10 targeting urgent vulnerabilities. Upgrade without delay!. postgresql10 security update, SUSE update instructions, software vulnerability fix, enterprise server patch. . LinuxSecurity.com Team
May 27, 2021
SuSE
202
security advisoryupdateimportantopenSUSE Leap 15.1: 2020:2028-1 Important: postgresql10 DoS Threat
An update that fixes three vulnerabilities is now available. . openSUSE Security Update: Security update for postgresql10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2028-1 Rating: important References: #1178666 #1178667 #1178668 Cross-References: CVE-2020-25694 CVE-2020-25695 CVE-2020-25696 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for postgresql10 fixes the following issues: - Upgrade to version 10.15: * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. * CVE-2020-25694, bsc#1178667: a) Fix usage of complex connection-string parameters in pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb. b) When psql's \connect command re-uses connection parameters, ensure that all non-overridden parameters from a previous connection string are re-used. * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from modifying specially-treated variables. * Fix recently-added timetz test case so it works when the USA is not observing daylight savings time. * https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/ * https://https://www.postgresql.org/docs/10/release-10-15.html This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patchopenSUSE-2020-2028=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): postgresql10-10.15-lp151.2.21.1 postgresql10-contrib-10.15-lp151.2.21.1 postgresql10-contrib-debuginfo-10.15-lp151.2.21.1 postgresql10-debuginfo-10.15-lp151.2.21.1 postgresql10-debugsource-10.15-lp151.2.21.1 postgresql10-devel-10.15-lp151.2.21.1 postgresql10-devel-debuginfo-10.15-lp151.2.21.1 postgresql10-plperl-10.15-lp151.2.21.1 postgresql10-plperl-debuginfo-10.15-lp151.2.21.1 postgresql10-plpython-10.15-lp151.2.21.1 postgresql10-plpython-debuginfo-10.15-lp151.2.21.1 postgresql10-pltcl-10.15-lp151.2.21.1 postgresql10-pltcl-debuginfo-10.15-lp151.2.21.1 postgresql10-server-10.15-lp151.2.21.1 postgresql10-server-debuginfo-10.15-lp151.2.21.1 postgresql10-test-10.15-lp151.2.21.1 - openSUSE Leap 15.1 (noarch): postgresql10-docs-10.15-lp151.2.21.1 References: https://www.suse.com/security/cve/CVE-2020-25694.html https://www.suse.com/security/cve/CVE-2020-25695.html https://www.suse.com/security/cve/CVE-2020-25696.html https://bugzilla.suse.com/1178666 https://bugzilla.suse.com/1178667 https://bugzilla.suse.com/1178668 _______________________________________________ openSUSE Security Announce mailing list --
Nov 26, 2020
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!