Cusbooneysiinta PostgreSQL 11.4, 10.9, 9.6.14, 9.5.18 iyo 9.4.23

La sameeyay cusboonaysiinta saxda ah ee dhammaan laamaha PostgreSQL ee la taageeray: 11.4, 10.9, 9.6.14, 9.5.18 и 9.4.23. Siideynta cusboonaysiinta laanta 9.4 socon doonaa ilaa Diseembar 2019, 9.5 ilaa Janaayo 2021, 9.6 ilaa Sebtembar 2021, 10 ilaa Oktoobar 2022, 11 ilaa Noofambar 2023.

Noocyada cusubi waxay saxaan 25 kutaanno waxayna meesha ka saarayaan nuglaanta (CVE-2019-10164) taas oo u horseedi karta bakhaar xad dhaaf ah marka isticmaaluhu beddelo erayga sirta ah. Isticmaalka nuglaantan, weeraryahan maxalli ah oo galaangal u leh PostgreSQL, wuxuu dejin karaa erayga sirta ah ee aad u dheer, abaabulo fulinta koodkiisa xuquuqda adeegsadaha uu DBMS ku hoos shaqeeyo. Intaa waxaa dheer, nuglaanta waxaa looga faa'iidaysan karaa dhinaca isticmaalaha inta lagu guda jiro habka macmiilka ku salaysan libpq ee gudbinaya aqoonsiga SCRAM marka isticmaaluhu galo server-ka PostgreSQL ee uu xukumo weeraryahan. Dhibaatadu waxay ka muuqataa PostgreSQL 10, 11 iyo 12-beta laamood.

Source: opennet.ru