{"id":102281,"date":"2021-11-14T09:36:51","date_gmt":"2021-11-14T07:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2"},"modified":"2021-11-14T09:36:51","modified_gmt":"2021-11-14T07:36:51","slug":"obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","title":{"rendered":"PostgreSQL-i v\u00e4rskendus turvaaugu lahendamiseks. Odyssey 1.2 \u00fchenduste tasakaalu v\u00e4ljaanne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

On korrigeerivad uuendused k\u00f5igile toetatud PostgreSQL harudele: 14.1, 13.5, 12.9, 11.14, 10.19 ja 9.6.24. Versioon 9.6.24 saab olema viimane uuendus haru 9.6, mille tugi l\u00f5petatakse. Uuendusi harule 10 koostatakse kuni 2022. aasta novembrini, 11 — kuni 2023. aasta novembrini, 12 — kuni 2024. aasta novembrini, 13 — kuni 2025. aasta novembrini, 14 — kuni 2026. aasta novembrini. <\/p>\n

Uutes versioonides on toodud \u00fcle 40 paranduse ja k\u00f5rvaldatud kaks haavatavust (CVE-2021-23214, CVE-2021-23222) serveri protsessis ja kliendi raamatukogus libpq. Haavatavused v\u00f5imaldavad r\u00fcndajal sekkuda kr\u00fcpteeritud side kanalisse l\u00e4bi MITM-r\u00fcnnaku. R\u00fcnnak ei vaja kehtivat SSL<\/a>-sertifikaati ja v\u00f5ib olla suunatud s\u00fcsteemidele, mis n\u00f5uavad kliendi autentimist sertifikaadi kaudu. Serveri kontekstis v\u00f5imaldab r\u00fcnnak asendada oma SQL-p\u00e4ringu kr\u00fcpteeritud \u00fchenduse loomise hetkel PostgreSQL serveriga. libpq kontekstis v\u00f5imaldab haavatavus r\u00fcndajal saata kliendile vale serveri vastuse. Koos v\u00f5imaldavad haavatavused v\u00e4lja t\u00f5mmata teavet paroolide v\u00f5i muude konfidentsiaalsete andmete kohta, mis edastatakse \u00fchenduse loomise varases etapis. <\/p>\n

Lisaks saab m\u00e4rkida, et Yandex on avaldanud uue versiooni proksi-serverist Odyssey 1.2, mis on m\u00f5eldud PostgreSQL andmebaasi avatud \u00fchenduste ja p\u00e4ringute marsruutimise haldamiseks. Odyssey toetab mitme t\u00f6\u00f6protsessi k\u00e4ivitamist mitu l\u00f5imek\u00e4sitlejat, samuti serveri<\/a> kui klient uuesti \u00fchendust loob, v\u00f5imalus siduda \u00fchenduse hulgad kasutajate ja andmebaasidega. Kood on kirjutatud C keeles ja levitatakse BSD litsentsi alusel. <\/p>\n

Uues versioonis on Odyssey-le lisatud kaitse andmete asendamise blokeerimiseks SSL-seansi l\u00e4bir\u00e4\u00e4kimiste j\u00e4rgselt (lubab blokeerida r\u00fcnnakud, mis kasutavad \u00fclaltoodud haavatavusi CVE-2021-23214 ja CVE-2021-23222). Realiseeritud on PAM ja LDAP tugi. Lisatud on integreerimine j\u00e4lgimiss\u00fcsteemiga Prometheus. Parendatud on statistika parameetrite arvutust tehingute ja p\u00e4ringute k\u00e4itamise aega arvesse v\u00f5ttes.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 \u0438 9.6.24. \u0412\u044b\u043f\u0443\u0441\u043a 9.6.24 \u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 9.6, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 10 \u0431\u0443\u0434\u0443\u0442 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430, 11 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, 12 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430, 13 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, 14 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102281","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47PostgreSQLi v\u00e4rskendamine turvavigade parandamisega. \u00dchenduste tasakaalustaja Odyssey 1.2 v\u00e4ljaanne | ProHoster","description":"On korrigeerivad uuendused k\u00f5ikidele toetatavatele PostgreSQL harudele: 14.1, 13.5, 12.9, 11.14, 10.19 ja 9.6.24. V\u00e4ljalase 9.6.24 saab olema viimane uuendus harule 9.6, kelle toetus l\u00f5petatakse.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 PostgreSQL \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u044b\u043f\u0443\u0441\u043a \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 Odyssey 1.2 | ProHoster","og:description":"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 \u0438 9.6.24. \u0412\u044b\u043f\u0443\u0441\u043a 9.6.24 \u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 9.6, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-14T07:36:51+00:00","article:modified_time":"2021-11-14T07:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102281","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-14 07:37:43","updated":"2026-02-09 21:42:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=102281"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102281\/revisions"}],"predecessor-version":[{"id":160183,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102281\/revisions\/160183"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=102281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=102281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=102281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}