Kusintha PostgreSQL 11.4, 10.9, 9.6.14, 9.5.18 ndi 9.4.23

Anapangidwa zosintha za nthambi zonse za PostgreSQL zothandizidwa: 11.4, 10.9, 9.6.14, 9.5.18 и 9.4.23. Kutulutsidwa kwa zosintha za nthambi 9.4 adzakhalapo mpaka December 2019, 9.5 mpaka January 2021, 9.6 mpaka September 2021, 10 mpaka October 2022, 11 mpaka November 2023.

Mitundu yatsopanoyi imakonza nsikidzi 25 ndikuchotsa chiwopsezo (CVE-2019-10164) chomwe chingayambitse kusefukira kwa buffer pomwe wogwiritsa ntchito asintha mawu achinsinsi. Pogwiritsa ntchito chiwopsezo ichi, wowukira wamba yemwe ali ndi mwayi wopeza PostgreSQL atha, pokhazikitsa mawu achinsinsi aatali kwambiri, kukonzekera kuchitidwa kwa code yake ndi ufulu wa wogwiritsa ntchito momwe DBMS ikuyendera. Kuonjezera apo, chiwopsezocho chikhoza kugwiritsidwa ntchito kumbali ya wogwiritsa ntchito panthawi ya kasitomala wa libpq akudutsa kutsimikizira kwa SCRAM pamene wogwiritsa ntchito apeza seva ya PostgreSQL yoyendetsedwa ndi woukira. Vuto likuwonekera mu nthambi za PostgreSQL 10, 11 ndi 12-beta.

Source: opennet.ru