{"id":104014,"date":"2022-05-13T03:36:48","date_gmt":"2022-05-13T01:36:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-postgresql-s-ustraneniem-uyazvimosti-vypusk-pg_ivm-1-0"},"modified":"2022-05-13T03:36:48","modified_gmt":"2022-05-13T01:36:48","slug":"obnovlenie-postgresql-s-ustraneniem-uyazvimosti-vypusk-pg_ivm-1-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimosti-vypusk-pg_ivm-1-0","title":{"rendered":"Atualiza\u00e7\u00e3o do PostgreSQL com corre\u00e7\u00e3o de vulnerabilidade. Lan\u00e7amento do pg_ivm 1.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Atualiza\u00e7\u00f5es corretivas foram formadas para todos os ramos suportados do PostgreSQL: 14.3, 13.7, 12.11, 11.16 e 10.22. O ramo 10.x est\u00e1 se aproximando do fim do suporte (as atualiza\u00e7\u00f5es ser\u00e3o formadas at\u00e9 novembro de 2022). O lan\u00e7amento de atualiza\u00e7\u00f5es para o ramo 11.x continuar\u00e1 at\u00e9 novembro de 2023, 12.x \u2014 at\u00e9 novembro de 2024, 13.x \u2014 at\u00e9 novembro de 2025, 14.x \u2014 at\u00e9 novembro de 2026. <\/p>\n

As novas vers\u00f5es oferecem mais de 50 corre\u00e7\u00f5es e solucionam a vulnerabilidade CVE-2022-1552, relacionada \u00e0 possibilidade de contornar o isolamento na execu\u00e7\u00e3o de opera\u00e7\u00f5es privilegiadas Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER e pg_amcheck. Um atacante, que possui permiss\u00e3o para criar objetos n\u00e3o tempor\u00e1rios em qualquer esquema de armazenamento, pode conseguir executar fun\u00e7\u00f5es SQL arbitr\u00e1rias com privil\u00e9gios de superusu\u00e1rio durante a execu\u00e7\u00e3o das opera\u00e7\u00f5es mencionadas anteriormente, afetando o objeto do atacante. A explora\u00e7\u00e3o da vulnerabilidade tamb\u00e9m pode ocorrer durante a limpeza autom\u00e1tica do banco de dados ao executar o manipulador autovacuum. <\/p>\n

Se a atualiza\u00e7\u00e3o n\u00e3o puder ser realizada, como uma solu\u00e7\u00e3o alternativa para a quest\u00e3o de bloqueio, \u00e9 poss\u00edvel desativar o autovacuum e evitar que o usu\u00e1rio privilegiado execute opera\u00e7\u00f5es REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW e CLUSTER, al\u00e9m de n\u00e3o iniciar a utilidade pg_amcheck e n\u00e3o restaurar o conte\u00fado de um backup criado pela utilidade pg_dump. A execu\u00e7\u00e3o do VACUUM foi considerada segura, assim como a aplica\u00e7\u00e3o de qualquer opera\u00e7\u00e3o de comando, desde que os objetos processados perten\u00e7am a usu\u00e1rios confi\u00e1veis. <\/p>\n

Entre outras mudan\u00e7as nas novas vers\u00f5es, destacam-se a atualiza\u00e7\u00e3o do c\u00f3digo JIT para compatibilidade com LLVM 14, permiss\u00f5es para uso de modelos database.schema.table nas utilidades psql, pg_dump e pg_amcheck, corre\u00e7\u00f5es de problemas que levavam \u00e0 corrup\u00e7\u00e3o de \u00edndices GiST sobre colunas ltree, arredondamento incorreto de valores no formato epoch extra\u00eddos de dados do tipo interval, falhas no funcionamento do planejador ao usar consultas remotas ass\u00edncronas, ordena\u00e7\u00e3o incorreta de linhas de tabela ao usar a express\u00e3o CLUSTER sobre \u00edndices com chaves baseadas em express\u00f5es, perda de dados em caso de falha logo ap\u00f3s a constru\u00e7\u00e3o de um \u00edndice GiST ordenado, deadlock ao remover um \u00edndice particionado e condi\u00e7\u00e3o de corrida entre a opera\u00e7\u00e3o DROP TABLESPACE e a fixa\u00e7\u00e3o de estado (checkpoint). <\/p>\n

Adicionalmente, tamb\u00e9m vale mencionar o lan\u00e7amento da extens\u00e3o pg_ivm 1.0 com a implementa\u00e7\u00e3o do suporte a IVM (Incremental View Maintenance) para o PostgreSQL 14. O IVM oferece uma maneira alternativa de atualizar vis\u00f5es materializadas, sendo mais eficiente quando as mudan\u00e7as afetam apenas uma pequena parte da vis\u00e3o. O IVM permite atualizar imediatamente as vis\u00f5es materializadas, aplicando apenas as mudan\u00e7as incrementais, sem a necessidade de rec\u00e1lculo completo da vis\u00e3o, realizado durante a opera\u00e7\u00e3o \"REFRESH MATERIALIZED VIEW\".
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.3, 13.7, 12.11, 11.16 \u0438 10.22. \u0412\u0435\u0442\u043a\u0430 10.x \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u0435\u0442\u0441\u044f \u043a \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u044e \u0441\u0440\u043e\u043a\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 (\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430). \u0412\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 11.x \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, 12.x — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430, 13.x — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, 14.x — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2026 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104014","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Atualiza\u00e7\u00e3o do PostgreSQL com corre\u00e7\u00e3o de vulnerabilidade. Lan\u00e7amento do pg_ivm 1.0 | ProHoster","description":"Foram formadas atualiza\u00e7\u00f5es corretivas para todos os ramos suportados do PostgreSQL: 14.3, 13.7, 12.11, 11.16 e 10.22.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimosti-vypusk-pg_ivm-1-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 PostgreSQL \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412\u044b\u043f\u0443\u0441\u043a pg_ivm 1.0 | ProHoster","og:description":"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.3, 13.7, 12.11, 11.16 \u0438 10.22.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimosti-vypusk-pg_ivm-1-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-13T01:36:48+00:00","article:modified_time":"2022-05-13T01:36:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104014","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 10:59:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-13 01:37:46","updated":"2026-01-25 10:59:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/104014","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=104014"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/104014\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=104014"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=104014"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=104014"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}