{"id":104014,"date":"2022-05-13T03:36:48","date_gmt":"2022-05-13T01:36:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-postgresql-s-ustraneniem-uyazvimosti-vypusk-pg_ivm-1-0"},"modified":"2022-05-13T03:36:48","modified_gmt":"2022-05-13T01:36:48","slug":"obnovlenie-postgresql-s-ustraneniem-uyazvimosti-vypusk-pg_ivm-1-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimosti-vypusk-pg_ivm-1-0","title":{"rendered":"Actualizare PostgreSQL cu remedieri de securitate. Lansare pg_ivm 1.0.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

S-au format actualiz\u0103ri corective pentru toate versiunile suportate ale PostgreSQL: 14.3, 13.7, 12.11, 11.16 \u0219i 10.22. Versiunea 10.x se apropie de sf\u00e2r\u0219itul perioadei de suport (actualiz\u0103rile vor fi realizate p\u00e2n\u0103 \u00een noiembrie 2022). Lansarea actualiz\u0103rilor pentru versiunea 11.x va continua p\u00e2n\u0103 \u00een noiembrie 2023, 12.x \u2014 p\u00e2n\u0103 \u00een noiembrie 2024, 13.x \u2014 p\u00e2n\u0103 \u00een noiembrie 2025, 14.x \u2014 p\u00e2n\u0103 \u00een noiembrie 2026. <\/p>\n

Noile versiuni propun peste 50 de corec\u021bii \u0219i remediaz\u0103 vulnerabilitatea CVE-2022-1552, legat\u0103 de posibilitatea de a ocoli izolarea execu\u021biei opera\u021biunilor privilegiate Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER \u0219i pg_amcheck. Atacatorul, care are permisiunea de a crea obiecte non-temporare \u00een orice schem\u0103 de stocare, poate ob\u021bine execu\u021bia de func\u021bii SQL arbitrare cu drepturi de superutilizator \u00een timpul execut\u0103rii opera\u021biunilor privilegiate men\u021bionate asupra obiectului atacatorului. De asemenea, exploatarea vulnerabilit\u0103\u021bii poate ap\u0103rea \u00een timpul cur\u0103\u021b\u0103rii automate a bazei de date la executarea handler-ului autovacuum. <\/p>\n

\u00cen cazul \u00een care actualizarea nu poate fi efectuat\u0103, ca o solu\u021bie alternativ\u0103 pentru blocarea problemei, se poate dezactiva autovacuum \u0219i nu se vor efectua opera\u021biuni privilegiate REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW \u0219i CLUSTER, de asemenea, nu se va porni utilitarul pg_amcheck \u0219i nu se va restaura con\u021binutul dintr-o copie de rezerv\u0103 realizat\u0103 cu utilitarul pg_dump. Execu\u021bia VACUUM este considerat\u0103 sigur\u0103, la fel ca \u0219i aplicarea oric\u0103ror opera\u021biuni de comand\u0103, dac\u0103 obiectele procesate apar\u021bin utilizatorilor de \u00eencredere. <\/p>\n

Printre alte modific\u0103ri din noile versiuni se num\u0103r\u0103 actualizarea codului JIT pentru a func\u021biona cu LLVM 14, permisiunea utiliz\u0103rii \u0219abloanelor database.schema.table \u00een utilitarele psql, pg_dump \u0219i pg_amcheck, corectarea problemelor care duc la coruperea indicilor GiST pe coloanele ltree, rotunjirea incorect\u0103 a valorilor \u00een format epoch extrase din date cu tipul interval, comportamentul incorect al planificatorului la utilizarea cererilor externe asincrone, sortarea incorect\u0103 a r\u00e2ndurilor din tabel la utilizarea expresiei CLUSTER pe indicii cu chei bazate pe expresii, pierderea datelor \u00een cazul unei opriri bru\u0219te imediat dup\u0103 construirea unui indice GiST sortat, blocajul mutual la \u0219tergerea unui indice sec\u021bionat, condi\u021biile de competi\u021bie \u00eentre opera\u021bia DROP TABLESPACE \u0219i blocarea st\u0103rii (checkpoint). <\/p>\n

De asemenea, se poate men\u021biona lansarea extensiei pg_ivm 1.0 cu implementarea suportului IVM (Incremental View Maintenance) pentru PostgreSQL 14. IVM ofer\u0103 o alternativ\u0103 pentru actualizarea vizualiz\u0103rilor materializate, fiind mai eficient\u0103 \u00een cazul \u00een care modific\u0103rile afecteaz\u0103 o parte mic\u0103 a vizualiz\u0103rii. IVM permite actualizarea instantanee a vizualiz\u0103rilor materializate, aplic\u00e2nd asupra lor doar modific\u0103rile incrementale, f\u0103r\u0103 a recalcula vizualizarea, lucru care se face \u00een cazul opera\u021biei \u00abREFRESH MATERIALIZED VIEW\u00bb.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.3, 13.7, 12.11, 11.16 \u0438 10.22. \u0412\u0435\u0442\u043a\u0430 10.x \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u0435\u0442\u0441\u044f \u043a \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u044e \u0441\u0440\u043e\u043a\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 (\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430). \u0412\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 11.x \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, 12.x — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430, 13.x — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430, 14.x — \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2026 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104014","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Actualizare PostgreSQL cu remedierea unei vulnerabilit\u0103\u021bi. Lansare pg_ivm 1.0 | ProHoster","description":"Au fost formulate actualiz\u0103ri corective pentru toate ramurile suportate de PostgreSQL: 14.3, 13.7, 12.11, 11.16 \u0219i 10.22.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimosti-vypusk-pg_ivm-1-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 PostgreSQL \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412\u044b\u043f\u0443\u0441\u043a pg_ivm 1.0 | ProHoster","og:description":"\u0421\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0442\u043e\u043a PostgreSQL: 14.3, 13.7, 12.11, 11.16 \u0438 10.22.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/obnovlenie-postgresql-s-ustraneniem-uyazvimosti-vypusk-pg_ivm-1-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-13T01:36:48+00:00","article:modified_time":"2022-05-13T01:36:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104014","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 10:59:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-13 01:37:46","updated":"2026-01-25 10:59:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/104014","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=104014"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/104014\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=104014"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=104014"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=104014"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}