Oval Definition:oval:org.opensuse.security:def:125566
Revision Date:2021-01-26Version:1
Title:Security update for postgresql, postgresql12, postgresql13 (Important)
Description:

This update for postgresql, postgresql12, postgresql13 fixes the following issues:

Initial packaging of PostgreSQL 13:

https://www.postgresql.org/about/news/2077/ * https://www.postgresql.org/docs/13/release-13.html

Changes in postgresql:

- Bump postgresql major version to 13.

Changes in postgresql12:

- %ghost the symlinks to pg_config and ecpg. (bsc#1178961) - BuildRequire libpq5 and libecpg6 when not building them to avoid dangling symlinks in the devel package. (bsc#1179765) - Fix a DST problem in the test suite.

Changes in postgresql13:

- Add postgresql-icu68.patch: fix build with ICU 68

- %ghost the symlinks to pg_config and ecpg. (bsc#1178961) - BuildRequire libpq5 and libecpg6 when not building them to avoid dangling symlinks in the devel package. (bsc#1179765)

Upgrade to version 13.1:

CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. * CVE-2020-25694, bsc#1178667: a) Fix usage of complex connection-string parameters in pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb. b) When psql's \connect command re-uses connection parameters, ensure that all non-overridden parameters from a previous connection string are re-used. * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from modifying specially-treated variables. * Fix recently-added timetz test case so it works when the USA is not observing daylight savings time. (obsoletes postgresql-timetz.patch) * https://www.postgresql.org/about/news/2111/ * https://www.postgresql.org/docs/13/release-13-1.html

- Fix a DST problem in the test suite.


Family:unixClass:patch
Status:Reference(s):1178666
1178667
1178668
1178961
1179765
CVE-2020-25694
CVE-2020-25695
CVE-2020-25696
SUSE-SU-2021:0217-1
Platform(s):SUSE Linux Enterprise Server for SAP Applications 12 SP4
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND Package Information
  • libecpg6-13.1-3.3.1 is installed
  • OR libpq5-13.1-3.3.1 is installed
  • OR libpq5-32bit-13.1-3.3.1 is installed
  • OR postgresql-13-4.7.1 is installed
  • OR postgresql-contrib-13-4.7.1 is installed
  • OR postgresql-docs-13-4.7.1 is installed
  • OR postgresql-plperl-13-4.7.1 is installed
  • OR postgresql-plpython-13-4.7.1 is installed
  • OR postgresql-pltcl-13-4.7.1 is installed
  • OR postgresql-server-13-4.7.1 is installed
  • BACK