shield Security update for postgresql, postgresql13

SUSE-SLE-Module-Server-Applications-15-SP2-2021-175

This update for postgresql, postgresql13 fixes the following issues: This update ships postgresql13. Upgrade to version 13.1: * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. * CVE-2020-25694, bsc#1178667: a) Fix usage of complex connection-string parameters in pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb. b) When psql's \connect command re-uses connection parameters, ensure that all non-overridden parameters from a previous connection string are re-used. * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from modifying specially-treated variables. * Fix recently-added timetz test case so it works when the USA is not observing daylight savings time. (obsoletes postgresql-timetz.patch) * https://www.postgresql.org/about/news/2111/ * https://www.postgresql.org/docs/13/release-13-1.html Initial packaging of PostgreSQL 13: * https://www.postgresql.org/about/news/2077/ * https://www.postgresql.org/docs/13/release-13.html - bsc#1178961: %ghost the symlinks to pg_config and ecpg. Changes in postgresql wrapper package: - Bump major version to 13. - We also transfer PostgreSQL 9.4.26 to the new package layout in SLE12-SP2 and newer. Reflect this in the conflict with postgresql94. - Also conflict with PostgreSQL versions before 9. - Conflicting with older versions is not limited to SLE.

• Release Date
  Jan 20 2021
• References
  Bugzilla: 1178668, 1178667, 1178961, 1178666
  CVEs: CVE-2020-25695, CVE-2020-25696, CVE-2020-25694
• Type
  security
• Severity
  moderate

cloud_download Downloads

Server Applications Module 15.2 aarch64

• Packages
  libecpg6
  Shared Libraries Required for PostgreSQL Clients

  13.1-5.3.15 lock rpm

  postgresql
  Basic Clients and Utilities for PostgreSQL

  13-4.6.7 lock src

  postgresql-contrib
  Contributed Extensions and Additions to PostgreSQL

  13-4.6.7 lock rpm

  postgresql-devel
  PostgreSQL development header files and libraries

  13-4.6.7 lock rpm

  postgresql-docs
  HTML Documentation for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-plperl
  The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-plpython
  The PL/Python Procedural Languages for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-pltcl
  PL/Tcl Procedural Language for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-server
  The Programs Needed to Create and Run a PostgreSQL Server

  13-4.6.7 lock rpm

  postgresql-server-devel
  PostgreSQL server development header files and utilities

  13-4.6.7 lock rpm

  postgresql13
  Basic Clients and Utilities for PostgreSQL

  13.1-5.3.15 lock src

  13.1-5.3.10 lock src

  postgresql13-contrib
  Contributed Extensions and Additions to PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-devel
  PostgreSQL client development header files and libraries

  13.1-5.3.15 lock rpm

  postgresql13-docs
  HTML Documentation for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-plperl
  The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-plpython
  The PL/Python Procedural Languages for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-pltcl
  PL/Tcl Procedural Language for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-server
  The Programs Needed to Create and Run a PostgreSQL Server

  13.1-5.3.15 lock rpm

  postgresql13-server-devel
  PostgreSQL server development header files and utilities

  13.1-5.3.15 lock rpm

Server Applications Module 15.2 ppc64le

• Packages
  libecpg6
  Shared Libraries Required for PostgreSQL Clients

  13.1-5.3.15 lock rpm

  postgresql
  Basic Clients and Utilities for PostgreSQL

  13-4.6.7 lock src

  postgresql-contrib
  Contributed Extensions and Additions to PostgreSQL

  13-4.6.7 lock rpm

  postgresql-devel
  PostgreSQL development header files and libraries

  13-4.6.7 lock rpm

  postgresql-docs
  HTML Documentation for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-plperl
  The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-plpython
  The PL/Python Procedural Languages for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-pltcl
  PL/Tcl Procedural Language for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-server
  The Programs Needed to Create and Run a PostgreSQL Server

  13-4.6.7 lock rpm

  postgresql-server-devel
  PostgreSQL server development header files and utilities

  13-4.6.7 lock rpm

  postgresql13
  Basic Clients and Utilities for PostgreSQL

  13.1-5.3.15 lock src

  13.1-5.3.10 lock src

  postgresql13-contrib
  Contributed Extensions and Additions to PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-devel
  PostgreSQL client development header files and libraries

  13.1-5.3.15 lock rpm

  postgresql13-docs
  HTML Documentation for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-plperl
  The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-plpython
  The PL/Python Procedural Languages for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-pltcl
  PL/Tcl Procedural Language for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-server
  The Programs Needed to Create and Run a PostgreSQL Server

  13.1-5.3.15 lock rpm

  postgresql13-server-devel
  PostgreSQL server development header files and utilities

  13.1-5.3.15 lock rpm

Server Applications Module 15.2 s390x

• Packages
  libecpg6
  Shared Libraries Required for PostgreSQL Clients

  13.1-5.3.15 lock rpm

  postgresql
  Basic Clients and Utilities for PostgreSQL

  13-4.6.7 lock src

  postgresql-contrib
  Contributed Extensions and Additions to PostgreSQL

  13-4.6.7 lock rpm

  postgresql-devel
  PostgreSQL development header files and libraries

  13-4.6.7 lock rpm

  postgresql-docs
  HTML Documentation for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-plperl
  The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-plpython
  The PL/Python Procedural Languages for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-pltcl
  PL/Tcl Procedural Language for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-server
  The Programs Needed to Create and Run a PostgreSQL Server

  13-4.6.7 lock rpm

  postgresql-server-devel
  PostgreSQL server development header files and utilities

  13-4.6.7 lock rpm

  postgresql13
  Basic Clients and Utilities for PostgreSQL

  13.1-5.3.15 lock src

  13.1-5.3.10 lock src

  postgresql13-contrib
  Contributed Extensions and Additions to PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-devel
  PostgreSQL client development header files and libraries

  13.1-5.3.15 lock rpm

  postgresql13-docs
  HTML Documentation for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-plperl
  The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-plpython
  The PL/Python Procedural Languages for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-pltcl
  PL/Tcl Procedural Language for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-server
  The Programs Needed to Create and Run a PostgreSQL Server

  13.1-5.3.15 lock rpm

  postgresql13-server-devel
  PostgreSQL server development header files and utilities

  13.1-5.3.15 lock rpm

Server Applications Module 15.2 x86_64

• Packages
  libecpg6
  Shared Libraries Required for PostgreSQL Clients

  13.1-5.3.15 lock rpm

  postgresql
  Basic Clients and Utilities for PostgreSQL

  13-4.6.7 lock src

  postgresql-contrib
  Contributed Extensions and Additions to PostgreSQL

  13-4.6.7 lock rpm

  postgresql-devel
  PostgreSQL development header files and libraries

  13-4.6.7 lock rpm

  postgresql-docs
  HTML Documentation for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-plperl
  The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-plpython
  The PL/Python Procedural Languages for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-pltcl
  PL/Tcl Procedural Language for PostgreSQL

  13-4.6.7 lock rpm

  postgresql-server
  The Programs Needed to Create and Run a PostgreSQL Server

  13-4.6.7 lock rpm

  postgresql-server-devel
  PostgreSQL server development header files and utilities

  13-4.6.7 lock rpm

  postgresql13
  Basic Clients and Utilities for PostgreSQL

  13.1-5.3.15 lock src

  13.1-5.3.10 lock src

  postgresql13-contrib
  Contributed Extensions and Additions to PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-devel
  PostgreSQL client development header files and libraries

  13.1-5.3.15 lock rpm

  postgresql13-docs
  HTML Documentation for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-plperl
  The PL/Tcl, PL/Perl, and PL/Python procedural languages for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-plpython
  The PL/Python Procedural Languages for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-pltcl
  PL/Tcl Procedural Language for PostgreSQL

  13.1-5.3.15 lock rpm

  postgresql13-server
  The Programs Needed to Create and Run a PostgreSQL Server

  13.1-5.3.15 lock rpm

  postgresql13-server-devel
  PostgreSQL server development header files and utilities

  13.1-5.3.15 lock rpm