{"id":102281,"date":"2021-11-14T09:36:51","date_gmt":"2021-11-14T07:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2"},"modified":"2021-11-14T09:36:51","modified_gmt":"2021-11-14T07:36:51","slug":"obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","title":{"rendered":"Mise \u00e0 jour de PostgreSQL avec correction des vuln\u00e9rabilit\u00e9s. Sortie du r\u00e9partiteur de connexions Odyssey 1.2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Des mises \u00e0 jour correctives ont \u00e9t\u00e9 \u00e9labor\u00e9es pour toutes les branches prises en charge de PostgreSQL : 14.1, 13.5, 12.9, 11.14, 10.19 et 9.6.24. La version 9.6.24 sera la derni\u00e8re mise \u00e0 jour pour la branche 9.6, dont le support est arr\u00eat\u00e9. Les mises \u00e0 jour pour la branche 10 seront fournies jusqu'en novembre 2022, 11 jusqu'en novembre 2023, 12 jusqu'en novembre 2024, 13 jusqu'en novembre 2025, et 14 jusqu'en novembre 2026. <\/p>\n

Les nouvelles versions proposent plus de 40 correctifs et corrigent deux vuln\u00e9rabilit\u00e9s (CVE-2021-23214, CVE-2021-23222) dans le processus serveur et la biblioth\u00e8que cliente libpq. Les vuln\u00e9rabilit\u00e9s permettent \u00e0 un attaquant de s'introduire dans le canal de communication crypt\u00e9 en r\u00e9alisant une attaque MITM. L'attaque ne n\u00e9cessite pas de certificat valide SSL<\/a>-et peut \u00eatre r\u00e9alis\u00e9e contre des syst\u00e8mes n\u00e9cessitant une authentification client par certificat. Dans le contexte du serveur, l'attaque permet d'injecter sa propre requ\u00eate SQL au moment de l'\u00e9tablissement de la connexion chiffr\u00e9e entre le client et le serveur PostgreSQL. Dans le contexte de libpq, la vuln\u00e9rabilit\u00e9 permet \u00e0 l'attaquant de renvoyer une r\u00e9ponse fictive du serveur au client. Ensemble, ces vuln\u00e9rabilit\u00e9s permettent d'extraire des informations sur le mot de passe ou d'autres donn\u00e9es confidentielles du client, transmises \u00e0 un stade pr\u00e9coce de la connexion. <\/p>\n

Il convient \u00e9galement de noter la publication par Yandex d'une nouvelle version du serveur proxy Odyssey 1.2, destin\u00e9 \u00e0 maintenir un pool de connexions ouvertes \u00e0 la base de donn\u00e9es PostgreSQL et \u00e0 organiser le routage des requ\u00eates. Odyssey prend en charge le lancement de plusieurs processus de travail avec des gestionnaires multithreads, en direction de serveur<\/a> la reconnexion du client, la possibilit\u00e9 de lier des pools de connexions aux utilisateurs et aux bases de donn\u00e9es. Le code est \u00e9crit en C et est distribu\u00e9 sous licence BSD. <\/p>\n

La nouvelle version d'Odyssey a ajout\u00e9 une protection pour bloquer l'injection de donn\u00e9es apr\u00e8s l'\u00e9tablissement de la session SSL (permet de bloquer les attaques utilisant les vuln\u00e9rabilit\u00e9s mentionn\u00e9es CVE-2021-23214 et CVE-2021-23222). Le support de PAM et LDAP a \u00e9t\u00e9 impl\u00e9ment\u00e9. Une int\u00e9gration avec le syst\u00e8me de surveillance Prometheus a \u00e9t\u00e9 ajout\u00e9e. Le calcul des param\u00e8tres statistiques pour la prise en compte du temps d'ex\u00e9cution des transactions et des requ\u00eates a \u00e9t\u00e9 am\u00e9lior\u00e9.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 \u0438 9.6.24. \u0412\u044b\u043f\u0443\u0441\u043a 9.6.24 \u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 9.6, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 10 \u0431\u0443\u0434\u0443\u0442 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430, 11 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, 12 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430, 13 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, 14 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102281","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mise \u00e0 jour de PostgreSQL corrigeant des vuln\u00e9rabilit\u00e9s. Publication du r\u00e9partiteur de connexions Odyssey 1.2 | ProHoster","description":"Des mises \u00e0 jour correctives ont \u00e9t\u00e9 formul\u00e9es pour toutes les branches prises en charge de PostgreSQL : 14.1, 13.5, 12.9, 11.14, 10.19 et 9.6.24. La version 9.6.24 sera la derni\u00e8re mise \u00e0 jour pour la branche 9.6, dont le support est arr\u00eat\u00e9.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 PostgreSQL \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u044b\u043f\u0443\u0441\u043a \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 Odyssey 1.2 | ProHoster","og:description":"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 \u0438 9.6.24. \u0412\u044b\u043f\u0443\u0441\u043a 9.6.24 \u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 9.6, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-14T07:36:51+00:00","article:modified_time":"2021-11-14T07:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102281","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-14 07:37:43","updated":"2026-02-09 21:42:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/102281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=102281"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/102281\/revisions"}],"predecessor-version":[{"id":160183,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/102281\/revisions\/160183"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=102281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=102281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=102281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}