gpp_maybe
Security update for postgresql12
SUSE-SLE-SAP-12-SP2-2020-3630
This update for postgresql12 fixes the following issues: Upgrade to version 12.5: * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. * CVE-2020-25694, bsc#1178667: a) Fix usage of complex connection-string parameters in pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb. b) When psql's \connect command re-uses connection parameters, ensure that all non-overridden parameters from a previous connection string are re-used. * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from modifying specially-treated variables. * Fix recently-added timetz test case so it works when the USA is not observing daylight savings time. (obsoletes postgresql-timetz.patch) * https://www.postgresql.org/about/news/2111/ * https://www.postgresql.org/docs/12/release-12-5.html The previous postgresql12 update already addressed: Update to 12.4: * CVE-2020-14349, bsc#1175193: Set a secure search_path in logical replication walsenders and apply workers * CVE-2020-14350, bsc#1175194: Make contrib modules' installation scripts more secure. * https://www.postgresql.org/docs/12/release-12-4.html
-
Release DateDec 4 2020
-
ReferencesBugzilla: 1175193, 1175194, 1178666, 1178667, 1178668
CVEs: CVE-2020-25694, CVE-2020-25695, CVE-2020-25696, CVE-2020-14350, CVE-2020-14349 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le
-
Packageslibecpg6
Shared Libraries Required for PostgreSQL Clientslibpq512.5-3.9.3lock rpm
Shared Libraries Required for PostgreSQL Clientspostgresql1212.5-3.9.3lock rpm
Basic Clients and Utilities for PostgreSQL12.5-3.9.3lock src
SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64
-
Packageslibecpg6
Shared Libraries Required for PostgreSQL Clientslibpq512.5-3.9.3lock rpm
Shared Libraries Required for PostgreSQL Clientslibpq5-32bit12.5-3.9.3lock rpm
Shared Libraries Required for PostgreSQL Clientspostgresql1212.5-3.9.3lock rpm
Basic Clients and Utilities for PostgreSQL12.5-3.9.3lock src