gpp_maybe Security update for postgresql15

SUSE-SLE-Module-Basesystem-15-SP5-2024-4174

This update for postgresql15 fixes the following issues: - CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference (bsc#1233323). - CVE-2024-10977: Make libpq discard error messages received during SSL or GSS protocol negotiation (bsc#1233325). - CVE-2024-10978: Fix unintended interactions between SET SESSION AUTHORIZATION and SET ROLE (bsc#1233326). - CVE-2024-10979: Prevent trusted PL/Perl code from changing environment variables (bsc#1233327).

Release Date

Dec 4 2024
References

Bugzilla: 1233326, 1233323, 1233327, 1233325
CVEs: CVE-2024-10979, CVE-2024-10977, CVE-2024-10978, CVE-2024-10976
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.5 ppc64le

Packages

postgresql15
Basic Clients and Utilities for PostgreSQL

15.10-150200.5.33.1 lock rpm lock src

Basesystem Module 15.5 aarch64

Packages

postgresql15
Basic Clients and Utilities for PostgreSQL

15.10-150200.5.33.1 lock rpm lock src

Basesystem Module 15.5 s390x

Packages

postgresql15
Basic Clients and Utilities for PostgreSQL

15.10-150200.5.33.1 lock rpm lock src

Basesystem Module 15.5 x86_64

Packages

postgresql15
Basic Clients and Utilities for PostgreSQL

15.10-150200.5.33.1 lock rpm lock src