{"id":102281,"date":"2021-11-14T09:36:51","date_gmt":"2021-11-14T07:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2"},"modified":"2021-11-14T09:36:51","modified_gmt":"2021-11-14T07:36:51","slug":"obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","title":{"rendered":"Aktualizace PostgreSQL eliminuje zranitelnosti. Vyd\u00e1n\u00ed vyrovn\u00e1va\u010de spojen\u00ed Odyssey 1.2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Byly vytvo\u0159eny opraven\u00e9 aktualizace pro v\u0161echny podporovan\u00e9 v\u011btve PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 a 9.6.24. Verze 9.6.24 bude posledn\u00ed aktualizac\u00ed pro v\u011btev 9.6, jej\u00ed\u017e podpora byla ukon\u010dena. Aktualizace pro v\u011btev 10 budou vytvo\u0159eny do listopadu 2022, 11 \u2014 do listopadu 2023, 12 \u2014 do listopadu 2024, 13 \u2014 do listopadu 2025, 14 \u2014 do listopadu 2026. <\/p>\n

Nov\u00e9 verze obsahuj\u00ed v\u00edce ne\u017e 40 oprav a odstranily dv\u011b zranitelnosti (CVE-2021-23214, CVE-2021-23222) v serverov\u00e9m procesu a klientsk\u00e9 knihovn\u011b libpq. Zranitelnosti umo\u017e\u0148uj\u00ed \u00fato\u010dn\u00edkovi vniknout do \u0161ifrovan\u00e9ho komunika\u010dn\u00edho kan\u00e1lu prost\u0159ednictv\u00edm proveden\u00ed \u00fatoku MITM. \u00datok nevy\u017eaduje platn\u00fd SSL<\/a>-certifik\u00e1t a m\u016f\u017ee b\u00fdt proveden proti syst\u00e9m\u016fm, kter\u00e9 vy\u017eaduj\u00ed autentizaci klienta pomoc\u00ed certifik\u00e1tu. V kontextu serveru \u00fatok umo\u017e\u0148uje nahradit SQL dotaz v okam\u017eiku, kdy je navazov\u00e1no \u0161ifrovan\u00e9 spojen\u00ed klienta se serverem PostgreSQL. V kontextu libpq zranitelnost umo\u017e\u0148uje \u00fato\u010dn\u00edkovi vr\u00e1tit klientovi fale\u0161nou odpov\u011b\u010f serveru. V kombinaci mohou zranitelnosti umo\u017enit z\u00edsk\u00e1n\u00ed informac\u00ed o heslech nebo jin\u00fdch d\u016fv\u011brn\u00fdch \u00fadaj\u00edch klienta, kter\u00e9 jsou p\u0159en\u00e1\u0161eny na po\u010d\u00e1tku spojen\u00ed. <\/p>\n

D\u00e1le lze zm\u00ednit vyd\u00e1n\u00ed nov\u00e9 verze proxy serveru Odyssey 1.2 spole\u010dnost\u00ed Yandex, ur\u010den\u00e9 k udr\u017eov\u00e1n\u00ed poolu otev\u0159en\u00fdch spojen\u00ed k datab\u00e1zov\u00e9mu syst\u00e9mu PostgreSQL a organizaci sm\u011brov\u00e1n\u00ed dotaz\u016f. Odyssey podporuje spu\u0161t\u011bn\u00ed n\u011bkolika pracovn\u00edch proces\u016f s v\u00edcethreadov\u00fdmi zpracovateli a krom\u011b toho serveru<\/a> p\u0159i op\u011btovn\u00e9m spojen\u00ed klienta, mo\u017enost sv\u00e1z\u00e1n\u00ed pool\u016f spojen\u00ed s u\u017eivateli a datab\u00e1zemi. K\u00f3d je naps\u00e1n v jazyce C a je distribuov\u00e1n pod licenc\u00ed BSD. <\/p>\n

Nov\u00e1 verze Odyssey p\u0159idala ochranu proti nahrazov\u00e1n\u00ed dat po vyjedn\u00e1v\u00e1n\u00ed SSL relace (blokuje \u00fatoky za pou\u017eit\u00ed v\u00fd\u0161e uveden\u00fdch zranitelnost\u00ed CVE-2021-23214 a CVE-2021-23222). Byla implementov\u00e1na podpora PAM a LDAP. P\u0159id\u00e1na integrace se syst\u00e9mem sledov\u00e1n\u00ed Prometheus. Bylo vylep\u0161eno v\u00fdpo\u010dtov\u00e1n\u00ed statistick\u00fdch parametr\u016f pro z\u00e1znam doby trv\u00e1n\u00ed transakc\u00ed a dotaz\u016f.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 \u0438 9.6.24. \u0412\u044b\u043f\u0443\u0441\u043a 9.6.24 \u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 9.6, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 10 \u0431\u0443\u0434\u0443\u0442 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430, 11 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, 12 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430, 13 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, 14 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102281","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Aktualizace PostgreSQL s opravou bezpe\u010dnostn\u00edch chyb. Vyd\u00e1n\u00ed vyva\u017eova\u010de spojen\u00ed Odyssey 1.2 | ProHoster","description":"Byly vytvo\u0159eny opravy pro v\u0161echny podporovan\u00e9 v\u011btve PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 a 9.6.24. Verze 9.6.24 bude posledn\u00ed aktualizac\u00ed pro v\u011btev 9.6, jej\u00ed\u017e podpora byla ukon\u010dena.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 PostgreSQL \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u044b\u043f\u0443\u0441\u043a \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 Odyssey 1.2 | ProHoster","og:description":"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 \u0438 9.6.24. \u0412\u044b\u043f\u0443\u0441\u043a 9.6.24 \u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 9.6, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-14T07:36:51+00:00","article:modified_time":"2021-11-14T07:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102281","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-14 07:37:43","updated":"2026-02-09 21:42:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/102281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=102281"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/102281\/revisions"}],"predecessor-version":[{"id":160183,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/102281\/revisions\/160183"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=102281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=102281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=102281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}