Kuvandudza PostgreSQL 11.4, 10.9, 9.6.14, 9.5.18 uye 9.4.23

Yakagadzirwa kugadzirisa zvigadziriso kune ese anotsigirwa PostgreSQL mapazi: 11.4, 10.9, 9.6.14, 9.5.18 ΠΈ 9.4.23. Kuburitswa kwekuvandudzwa kwebazi 9.4 ichagara kusvika Zvita 2019, 9.5 kusvika Ndira 2021, 9.6 kusvika Gunyana 2021, 10 kusvika Gumiguru 2022, 11 kusvika Mbudzi 2023.

Iwo mavhezheni matsva anogadzirisa 25 bugs uye kubvisa kusagadzikana (CVE-2019-10164) izvo zvinogona kutungamira kune buffer kufashukira kana mushandisi achinja password yavo. Uchishandisa kusagadzikana uku, munhu anorwisa munharaunda ane mukana wePostgreSQL anogona, nekuisa password refu kwazvo, kuronga kuitiswa kwekodhi yake nekodzero dzemushandisi pasi peiyo DBMS iri kushanda. Pamusoro pezvo, kusazvibata kunogona kushandiswa kudivi remushandisi panguva yekuita kwe libpq-based mutengi achipfuura SCRAM kusimbiswa kana mushandisi awana PostgreSQL server inodzorwa neanorwisa. Dambudziko rinoonekwa muPostgreSQL 10, 11 uye 12-beta mapazi.

Source: opennet.ru

Voeg