{"id":102281,"date":"2021-11-14T09:36:51","date_gmt":"2021-11-14T07:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2"},"modified":"2021-11-14T09:36:51","modified_gmt":"2021-11-14T07:36:51","slug":"obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","title":{"rendered":"PostgreSQL v\u00e4rskendus, mille puhul on k\u00f5rvaldatud turvaaugud. Kliendibaasi tasakaalustaja Odyssey 1.2 v\u00e4ljaanne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

PostgreSQLi k\u00f5ikide toetatud harude jaoks on v\u00e4lja antud parandav uuendus: 14.1, 13.5, 12.9, 11.14, 10.19 ja 9.6.24. Versioon 9.6.24 on viimane uuendus harule 9.6, mille tugi l\u00f5petatakse. Uuendusi haru 10 jaoks tehakse kuni 2022. aasta novembrini, 11 — kuni 2023. aasta novembrini, 12 — kuni 2024. aasta novembrini, 13 — kuni 2025. aasta novembrini, 14 — kuni 2026. aasta novembrini. <\/p>\n

Uutes versioonides on pakutud \u00fcle 40 paranduse ja k\u00f5rvaldatud kaks haavatavust (CVE-2021-23214, CVE-2021-23222) serveriprotsessis ja kliendiraamatukogus libpq. Need haavatavused v\u00f5imaldavad r\u00fcndajal siseneda kr\u00fcpteeritud \u00fchendusse MITM-r\u00fcnnaku teel. R\u00fcnnak ei n\u00f5ua kehtivat SSL<\/a>-sertifikaadi ja v\u00f5ib toimuda s\u00fcsteemide vastu, mis n\u00f5uavad kliendi autentimist sertifikaadi alusel. PostgreSQL serveri kontekstis v\u00f5imaldab r\u00fcnnak asendada SQL-p\u00e4ringu hetkel, kui kliendi kr\u00fcpteeritud \u00fchendus serveriga luuakse. Libpq kontekstis v\u00f5imaldab haavatavus r\u00fcndajal kliendile vale serveri vastuse tagastada. Koos v\u00f5imaldavad haavatavused v\u00e4lja t\u00f5mmata teavet parooli v\u00f5i muude konfidentsiaalsete andmete kohta, mida klient edastab \u00fchenduse alguses. <\/p>\n

Lisaks v\u00f5ib m\u00e4rkida, et Yandex on v\u00e4lja andnud uue versiooni vahe-serverist Odyssey 1.2, mis on m\u00f5eldud PostgreSQL andmebaasiga avatud \u00fchenduste hoidmiseks ja p\u00e4ringute marsruutimiseks. Odyssey toetab mitmete t\u00f6\u00f6tajate protsesside k\u00e4ivitamist mitme l\u00f5ime t\u00f6\u00f6tlejatega ja suunamise samuti serverile<\/a> klientide taask\u00e4ivitusprotsessi, mille kaudu on v\u00f5imalik siduda \u00fchenduste erinevad basseinid kasutajate ja andmebaasidega. Kood on kirjutatud C keeles ja levitatakse BSD litsentsi alusel. <\/p>\n

Uues Odyssey versioonis on lisatud kaitse andmete asendamise blokeerimiseks SSL-seansi kokkuleppe j\u00e4rel (v\u00f5imaldab blokeerida r\u00fcnnakud, mis kasutavad eelpool mainitud haavatavusi CVE-2021-23214 ja CVE-2021-23222). Toetatakse PAM-i ja LDAP-i. On lisatud integratsioon seire s\u00fcsteemiga Prometheus. Parandatud on statistikas arvestamise parameetrite arvutamist, et arvesse v\u00f5tta tehingute ja p\u00e4ringute t\u00e4itmise aega.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 \u0438 9.6.24. \u0412\u044b\u043f\u0443\u0441\u043a 9.6.24 \u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 9.6, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 10 \u0431\u0443\u0434\u0443\u0442 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430, 11 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, 12 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430, 13 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, 14 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102281","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47PostgreSQL uuendus, mis k\u00f5rvaldab haavatavused. V\u00e4ljaanne \u00fchenduste tasakaalustaja Odyssey 1.2 | ProHoster","description":"On loodud parandavad uuendused k\u00f5igi toetatud PostgreSQL harude jaoks: 14.1, 13.5, 12.9, 11.14, 10.19 ja 9.6.24. V\u00e4ljaanne 9.6.24 on viimane uuendus harule 9.6, mille tugi l\u00f5peb. Uuendused harule 10 j\u00e4tkuvad kuni 2022. aasta novembri l\u00f5puni, 11 \u2013 kuni 2023. aasta novembri l\u00f5puni, 12 \u2013 kuni 2024. aasta novembri l\u00f5puni, 13 \u2013 kuni 2025. aasta novembri l\u00f5puni, 14","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 PostgreSQL \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u044b\u043f\u0443\u0441\u043a \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 Odyssey 1.2 | ProHoster","og:description":"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 \u0438 9.6.24. \u0412\u044b\u043f\u0443\u0441\u043a 9.6.24 \u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 9.6, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 10 \u0431\u0443\u0434\u0443\u0442 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430, 11 - \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, 12 - \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430, 13 - \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, 14","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-14T07:36:51+00:00","article:modified_time":"2021-11-14T07:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102281","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-14 07:37:43","updated":"2026-02-09 21:42:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=102281"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102281\/revisions"}],"predecessor-version":[{"id":160183,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102281\/revisions\/160183"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=102281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=102281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=102281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}