ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ PostgreSQL ืึทื– ืึทืœืึทื•ื– ืงืึธื“ ืฆื• ื–ื™ื™ืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ืžื™ื˜ ืึทืจื‘ืขื˜ืขืจ ืคึผืจืึธืฆืขืก ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื–

ืงืขืจืขืงื˜ื™ื•ื• ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ื–ืขื ืขืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ืคึฟืึทืจ ืึทืœืข ืฉื˜ื™ืฆื˜ ืฆื•ื•ื™ื™ื’ืŸ ืคื•ืŸ PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17 ืื•ืŸ 12.21, ืื™ืŸ ื•ื•ืึธืก 35 ืขืจืจืึธืจืก ื–ืขื ืขืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื•ืŸ 3 ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ - ืื™ื™ื ืขืจ ื’ืขืคืขืจืœืขืš ืื•ืŸ ืฆื•ื•ื™ื™ ื ื™ื˜-ื›ืึทื–ืขืจื“ืึทืก. ืขืก ืื™ื– ืื•ื™ืš ืžื•ื“ื™ืข ืึทื– ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ PostgreSQL 12 ืฆื•ื•ื™ื™ึทื’ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื“ื™ืกืงืึทื ื˜ื™ื ื™ื•ื“, ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืคึฟืึทืจ ื•ื•ืึธืก ื•ื•ืขื˜ ื ื™ื˜ ืžืขืจ ื–ื™ื™ืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“.

ื ื’ืขืคืขืจืœืขืš ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2024-10979), ื•ื•ืึธืก ืื™ื– ืึทืกื™ื™ื ื“ ืึท ืฉื˜ืจืขื ื’ืงื™ื™ึทื˜ ืžื“ืจื’ื” ืคื•ืŸ 8.8 ืคื•ืŸ 10, ืึทืœืึทื•ื– ืึท ื”ื™ื’ืข DBMS ื‘ืึทื ื™ืฆืขืจ ืžื™ื˜ ืจืขื›ื˜ ืฆื• ืฉืึทืคึฟืŸ PL / Perl ืคืึทื ื’ืงืฉืึทื ื– ืฆื• ื•ื™ืกืคื™ืจืŸ ืงืึธื“ ืžื™ื˜ ื“ื™ ืจืขื›ื˜ ืคื•ืŸ ื“ื™ ื‘ืึทื ื™ืฆืขืจ ืื•ื ื˜ืขืจ ื•ื•ืึธืก ื“ื™ DBMS ืื™ื– ืคืœื™ืกื ื“ื™ืง. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืžืึธื“ื™ืคื™ืฆื™ืจืŸ ื•ื•ืึธืจืงืคืœืึธื•ื• ืกื•ื•ื™ื•ื•ืข ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืื™ืŸ PL / ืคึผืขืจืœ ืคืึทื ื’ืงืฉืึทื ื–, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื“ื™ PATH ื•ื•ืขืจื™ืึทื‘ืึทืœื– ื•ื•ืึธืก ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ืคึผืึทื˜ืก ืฆื• ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ื˜ืขืงืขืก ืื•ืŸ PostgreSQL-ืกืคึผืขืฆื™ืคื™ืฉ ืกื•ื•ื™ื•ื•ืข ื•ื•ืขืจื™ืึทื‘ืึทืœื–. ืขืก ืื™ื– ื‘ืืžืขืจืงื˜ ืึทื– ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ืึท ื‘ืึทืคืึทืœืŸ, ืึทืงืกืขืก ืฆื• ื“ื™ DBMS ืื™ื– ื’ืขื ื•ื’ ืื•ืŸ ื˜ื•ื˜ ื ื™ืฉื˜ ื“ืึทืจืคืŸ ืึท ื—ืฉื‘ื•ืŸ ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื. ืฉืึทืคึฟืŸ ืึธื“ืขืจ ืคืึทืจื‘ื™ื™ึทื˜ืŸ ืคึฟื•ื ืงืฆื™ืข plperl_set_env_var() ืงืขืจื˜ ืคึผืึธืกืœ ื•ื•ื™ $$ $ENV{'ENV_VAR'} = 'ื˜ืขืกื˜ื•ื•ืึทืœ'; $$ LANGUAGE plperl; ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ plperl_set_env_var();

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’