{"id":102281,"date":"2021-11-14T09:36:51","date_gmt":"2021-11-14T07:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2"},"modified":"2021-11-14T09:36:51","modified_gmt":"2021-11-14T07:36:51","slug":"obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","title":{"rendered":"Aktualizacja PostgreSQL z usuni\u0119ciem luk w zabezpieczeniach. Wydanie load balancera Odyssey 1.2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sformu\u0142owano poprawki aktualizacji dla wszystkich wspieranych ga\u0142\u0119zi PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 i 9.6.24. Wydanie 9.6.24 b\u0119dzie ostatni\u0105 aktualizacj\u0105 dla ga\u0142\u0119zi 9.6, kt\u00f3rej wsparcie zostaje zako\u0144czone. Aktualizacje dla ga\u0142\u0119zi 10 b\u0119d\u0105 tworzone do listopada 2022 roku, 11 \u2014 do listopada 2023 roku, 12 \u2014 do listopada 2024 roku, 13 \u2014 do listopada 2025 roku, 14 \u2014 do listopada 2026 roku. <\/p>\n

W nowych wersjach wprowadzono ponad 40 poprawek i usuni\u0119to dwie luki (CVE-2021-23214, CVE-2021-23222) w serwerze i bibliotece klienckiej libpq. Luki te pozwalaj\u0105 atakuj\u0105cemu na wstrzykni\u0119cie si\u0119 w szyfrowany kana\u0142 komunikacyjny poprzez przeprowadzenie ataku MITM. Atak ten nie wymaga posiadania poprawnego SSL<\/a>-certyfikatu i mo\u017ce by\u0107 przeprowadzony przeciwko systemom wymagaj\u0105cym uwierzytelniania klienta za pomoc\u0105 certyfikatu. W kontek\u015bcie serwera atak ten pozwala na wstrzykiwanie w\u0142asnego zapytania SQL w momencie nawi\u0105zywania szyfrowanego po\u0142\u0105czenia klienta z serwerem PostgreSQL. W kontek\u015bcie libpq luka ta pozwala atakuj\u0105cemu na wys\u0142anie klientowi fa\u0142szywej odpowiedzi serwera. W po\u0142\u0105czeniu, luki te umo\u017cliwiaj\u0105 wydobycie informacji o ha\u015ble lub innych poufnych danych klienta przesy\u0142anych na wczesnym etapie po\u0142\u0105czenia. <\/p>\n

Dodatkowo warto zaznaczy\u0107 publikacj\u0119 nowej wersji serwera proxy Odyssey 1.2 przez firm\u0119 Yandex, przeznaczonego do utrzymywania puli otwartych po\u0142\u0105cze\u0144 z baz\u0105 danych PostgreSQL oraz organizacji routingu zapyta\u0144. Odyssey wspiera uruchamianie wielu proces\u00f3w roboczych z wielow\u0105tkowymi handlerami, kieruj\u0105c si\u0119 r\u00f3wnie\u017c serwera<\/a> przy ponownym po\u0142\u0105czeniu klienta, mo\u017cliwo\u015b\u0107 przypisania pul po\u0142\u0105cze\u0144 do u\u017cytkownik\u00f3w i baz danych. Kod zosta\u0142 napisany w j\u0119zyku C i jest rozpowszechniany na licencji BSD. <\/p>\n

W nowej wersji Odyssey dodano zabezpieczenie blokuj\u0105ce wstrzykiwanie danych po negocjacji sesji SSL (zapobiega blokowaniu atak\u00f3w wykorzystuj\u0105cych wcze\u015bniej wymienione luki CVE-2021-23214 i CVE-2021-23222). Wdro\u017cono wsparcie dla PAM i LDAP. Dodano integracj\u0119 z systemem monitorowania Prometheus. Ulepszono obliczanie parametr\u00f3w statystyki dotycz\u0105cych czasu wykonania transakcji i zapyta\u0144.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 \u0438 9.6.24. \u0412\u044b\u043f\u0443\u0441\u043a 9.6.24 \u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 9.6, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 10 \u0431\u0443\u0434\u0443\u0442 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430, 11 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, 12 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430, 13 — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, 14 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102281","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Aktualizacja PostgreSQL z usuni\u0119tymi lukami zabezpiecze\u0144. Wydanie balancer'a po\u0142\u0105cze\u0144 Odyssey 1.2 | ProHoster","description":"Zosta\u0142y wydane poprawki do wszystkich wspieranych ga\u0142\u0119zi PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 oraz 9.6.24. Wydanie 9.6.24 b\u0119dzie ostatni\u0105 aktualizacj\u0105 dla ga\u0142\u0119zi 9.6, kt\u00f3rej wsparcie zostanie zako\u0144czone.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 PostgreSQL \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u044b\u043f\u0443\u0441\u043a \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 Odyssey 1.2 | ProHoster","og:description":"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.1, 13.5, 12.9, 11.14, 10.19 \u0438 9.6.24. \u0412\u044b\u043f\u0443\u0441\u043a 9.6.24 \u0441\u0442\u0430\u043d\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 9.6, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimostej-vypusk-balansirovshhika-soedinenij-odyssey-1-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-14T07:36:51+00:00","article:modified_time":"2021-11-14T07:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102281","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-14 07:37:43","updated":"2026-02-09 21:42:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/102281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=102281"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/102281\/revisions"}],"predecessor-version":[{"id":160183,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/102281\/revisions\/160183"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=102281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=102281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=102281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}