Kuvandudza PostgreSQL 11.3, 10.8, 9.6.13, 9.5.17 uye 9.4.22

Yakagadzirwa kugadzirisa zvigadziriso kune ese anotsigirwa PostgreSQL mapazi: 11.3, 10.8, 9.6.13, 9.5.17 ΠΈ 9.4.22, iyo ine chikamu chekugadzirisa bug. Kuburitswa kwekuvandudzwa kwebazi 9.4 ichagara kusvika Zvita 2019, 9.5 kusvika Ndira 2021, 9.6 kusvika Gunyana 2021, 10 kusvika Gumiguru 2022, 11 kusvika Mbudzi 2023.

Iwo mavhezheni matsva anogadzirisa anopfuura makumi matanhatu tsikidzi uye kubvisa husina njodzi ina:

  • Kusagadzikana kuviri (CVE-2019-10127, CVE-2019-10128) kwakanangana neWindows papuratifomu uye kunoonekwa mune vanoisa kubva kuEnterpriseDB neBigSQL, iyo isina kuseta kodzero dzekuwana dzakakodzera kune dhairekitori data, iyo yakabvumira chero asina rombo Windows mushandisi kuti atange. kodhi kuuraya paPostgreSQL sevhisi level.
  • Kusagadzikana kweCVE-2019-10129 kunoonekwa muPostgreSQL 11 uye inobvumira mushandisi kuverenga zvisingaverengeki nzvimbo dzekurangarira dze server process nekutumira yakanyatsogadzirwa INSERT chikumbiro kutafura yakakamurwa.
  • Vulnerability CVE-2019-10130 inokutendera kuti uverenge kukosha kwemarekodhi uko kuwana kunorambidzwa.

Fixed bugs zvinosanganisira huwori hwedhairekitori paunenge uchiita "ALTER TABLE" patafura yakakamurwa, kuparara kweserver kana chikanganiso chikaitika paunenge uchiedza kuchengetedza chitubu pakati pekuita, matambudziko ekuita kana kudzoreredza kumashure kutengeserana kunosanganisira nhamba huru yematafura, kushomeka kwerutsigiro rwe "GADZIRA TAFURA KANA USINA" kutaura IRIPO .. SEKUITA ..", ndangariro inodonha.

Source: opennet.ru

Voeg