Liphetolelo tse ncha li lokisa likokoana-hloko tse 75 'me li felise ho ba kotsing
(CVE-2020-1720) e bakiloeng ke cheke ea tumello e sieo ha ho etsoa taelo ea "ALTER ... E TŠEPILE HO EXTENSION". Tlas'a maemo a mang, ts'oaetso e lumella mosebelisi ea se nang monyetla ho hlakola tšebetso efe kapa efe, ts'ebetso, chebo ea 'mele, index, kapa trigger. Tlhaselo e ka etsahala haeba molaoli a kentse katoloso efe kapa efe, 'me mosebelisi a ka phethahatsa taelo ea CREATE kapa mong'a katoloso a ka kholiseha hore o tla phethahatsa taelo ea DROP EXTENSION.
Ho feta moo, o ka hlokomela ponahalo ea sesebelisoa se secha
- Ts'ehetso bakeng sa mefuta efe kapa efe ea litafole tse shebiloeng (maikutlo, fdw (Foreign Data Wrapper), litafole tse arotsoeng, litafole tse ajoang tsa citus);
- Bokhoni ba ho hlalosa mabitso a litafole bocha (ho ikatisetsa ho tloha tafoleng e 'ngoe ho ea ho e' ngoe);
- Tšehetso bakeng sa ho pheta-pheta ka mahlakore ka bobeli ka ho fetisa liphetoho tsa sebaka feela le ho hlokomoloha likarabo tse tsoang ka ntle;
- Ho fumaneha ha mokhoa oa ho rarolla likhohlano ho latela algorithm ea LWW (mongoli oa ho qetela-win);
- Bokhoni ba ho boloka tlhahisoleseling mabapi le tsoelo-pele ea ho pheta-pheta le likopi tse sa sebelisoeng tafoleng e arohaneng, e ka sebelisoang ho hlaphoheloa ka mor'a hore node e amohelehang ea nakoana e tsosolosoe.
Source: opennet.ru