Headline

RHSA-2022:4893: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-1552: postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

2 years ago

Red Hat Security Data

Open in Source

#sql #vulnerability #mac #linux #red_hat #perl #ibm #postgres #sap

概述

Important: postgresql:12 security update

类型/严重性

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

标题

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (12.11).

Security Fix(es):

postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox (CVE-2022-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

If the postgresql service is running, it will be automatically restarted after installing this update.

受影响的产品

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
Red Hat Enterprise Linux Server - TUS 8.2 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2 ppc64le
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions 8.2 x86_64

修复

BZ - 2081126 - CVE-2022-1552 postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox

参考

https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2

SRPM

pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src.rpm

SHA-256: cb53d724b1c790506a0aeb526b111e98598ed30694a60625ee208206d9313df5

postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.src.rpm

SHA-256: 485033866826ed00817c2832b52a46db7a2ab6f6657306baeff7425951367efe

postgresql-12.11-2.module+el8.2.0+15343+06a38260.src.rpm

SHA-256: e62973fa832fbf0ac7353e3eac8b74aba66560cfb1314a9f14f9a27b01f93623

x86_64

postgresql-test-rpm-macros-12.11-2.module+el8.2.0+15343+06a38260.noarch.rpm

SHA-256: 68ca870ac156bb854e65b311821719378f8df73abd82b6c770348f9e4e41c902

pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64.rpm

SHA-256: d1e3d38cf894f0624333426a61bed18d7d09d1c81ef2faae6c8b2f02ef4733fc

pgaudit-debuginfo-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64.rpm

SHA-256: cea60fc95bea0fd86ce7207784b4d6d2f6fc139b69ebd8400bfbd57ebee481fa

pgaudit-debugsource-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64.rpm

SHA-256: e316b5008809a187937f0e10c79cd21bfa529f106fcada033a19eae06df5a7af

postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.x86_64.rpm

SHA-256: d2e286ce5fcf5edfcaaead72dd0127ee4487377cb9a98f7715d3f65ad179eeab

postgres-decoderbufs-debuginfo-0.10.0-2.module+el8.2.0+9043+1dbb5661.x86_64.rpm

SHA-256: dd4174ee05407d89a764a775f77fad25857a0cdce92fce2690981f18cfdf872d

postgres-decoderbufs-debugsource-0.10.0-2.module+el8.2.0+9043+1dbb5661.x86_64.rpm

SHA-256: 3fb85fe9b48dfc1f933a9922100cddf4b4742d6149f86c1330fab73a7c8df9ee

postgresql-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 807a65a61905bc3be55e5fef041198c42b41c3f5f011ff8f732f8f45c02f3430

postgresql-contrib-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: e30f22d896784e7210be62abb7d95a5253b1d839af05007d6d1b000e0894d4ce

postgresql-contrib-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: fdf25d9055ddc9415cc90fb45e2ece6a2b0476aaff6903accda0211045073015

postgresql-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 4852fd302b31086aaac88bfcc72a300213a62c8c376792b7b35b0a7fbb829b2e

postgresql-debugsource-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: bd0e12e1d86d9be761895977cc4fe51851ef9ebc3fabf4ad773cfbbaf6056484

postgresql-docs-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: a95103681ab8ee9eddff52906afeeaa58102e3e4480ddddb0464eb05e41a3fa4

postgresql-docs-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 02bec8c862393dda534bd905c254e06dcd1025ac2b23971db0d241b668b06f1b

postgresql-plperl-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 980d973d67c7d6ba5301870d5d46fa2e21d8094293c01fe15876f291809306d7

postgresql-plperl-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 85372c450db37549d2d60822318f2f42bcabec8583e4cff33bb356caf659961f

postgresql-plpython3-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: bc2d73d64edb37a05cfbe69696bc4f9a66db2f62a9288310630e06c75c59e588

postgresql-plpython3-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 2be6bffe928f73ecea2659dd89116b8e90466885fc4518caacd5dfb215e793f7

postgresql-pltcl-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 10f0cb926d1e6b8b011a0482fae47b91b56ea8acbd0fa8cf3abaccf4ad619708

postgresql-pltcl-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 90692488d6fae902e911e3a2660aaed24f8eb2d2aa557fd551035909eb2c4a07

postgresql-server-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 776b8206637528ac92235b691867f5b1ab9ca1988022e52976b3f82cb67a1019

postgresql-server-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 61a85cd70a07213773c672e0e98887e35e09a4e8aac63d4bf5f24d410ec8ec03

postgresql-server-devel-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: d5018fedd9389c8f34d07259df31a46620d9445eb135fb270e344e1086401f0f

postgresql-server-devel-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 425c5eb626cd85d9ca05126b64b932534be90ab3274cebc3cbc1555aff62ac26

postgresql-static-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 8abd244a22aa9c0cd17d8541edc16c70d1a34a7b4997b842992aaabb9715a30e

postgresql-test-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 071137ae8f8c60b8dc49181d51334e775921201e2bf4fc4270f4aae587bcea58

postgresql-test-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: ba6fbdcd733922f0d79045e4727b1c628aef86560e74c58035b96b0bf8ac0399

postgresql-upgrade-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 0d79ca3a65d3b154081147831c6b7d8af6671e55a7f37646cd6cbe1055eb6d06

postgresql-upgrade-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 0ea01693040bd97f136f7917f8e90e9ffe741a7ff836e0aae51cfd4f52601099

postgresql-upgrade-devel-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 25a23af59c8ecc6df3e2dc9b0ef0d7da1d6566aa92d63f5fbfdfacdab823e1fb

postgresql-upgrade-devel-debuginfo-12.11-2.module+el8.2.0+15343+06a38260.x86_64.rpm

SHA-256: 8468fabeb92d7c3d1aad2f37940647f9016e087d750036f0890d14216e1bf48c

Red Hat Enterprise Linux Server - AUS 8.2