Oval Definition:	oval:org.opensuse.security:def:4886
Revision Date: 2020-12-02 Version: 1 Title: Security update for postgresql10 and postgresql12 (Moderate) Description: This update for postgresql10 and postgresql12 fixes the following issues: postgresql10 was updated to 10.13 (bsc#1171924). https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/10/release-10-13.html postgresql10 was updated to 10.12 (CVE-2020-1720, bsc#1163985) - https://www.postgresql.org/about/news/2011/ - https://www.postgresql.org/docs/10/release-10-12.html postgresql10 was updated to 10.11: - https://www.postgresql.org/about/news/1994/ - https://www.postgresql.org/docs/10/release-10-11.html postgresql12 was updated to 12.3 (bsc#1171924). Bug Fixes and Improvements: - Several fixes for GENERATED columns, including an issue where it was possible to crash or corrupt data in a table when the output of the generated column was the exact copy of a physical column on the table, e.g. if the expression called a function which could return its own input. - Several fixes for ALTER TABLE, including ensuring the SET STORAGE directive is propagated to a table's indexes. - Fix a potential race condition when using DROP OWNED BY while another session is deleting the same objects. - Allow for a partition to be detached when it has inherited ROW triggers. - Several fixes for REINDEX CONCURRENTLY, particularly with issues when a REINDEX CONCURRENTLY operation fails. - Fix crash when COLLATE is applied to an uncollatable type in a partition bound expression. - Fix performance regression in floating point overflow/underflow detection. - Several fixes for full text search, particularly with phrase searching. - Fix query-lifespan memory leak for a set-returning function used in a query's FROM clause. - Several reporting fixes for the output of VACUUM VERBOSE. - Allow input of type circle to accept the format (x,y),r, which is specified in the documentation. - Allow for the get_bit() and set_bit() functions to not fail on bytea strings longer than 256MB. - Avoid premature recycling of WAL segments during crash recovery, which could lead to WAL segments being recycled before being archived. - Avoid attempting to fetch nonexistent WAL files from archive storage during recovery by skipping irrelevant timelines. - Several fixes for logical replication and replication slots. - Fix several race conditions in synchronous standby management, including one that occurred when changing the synchronous_standby_names setting. - Several fixes for GSSAPI support, include a fix for a memory leak that occurred when using GSSAPI encryption. - Ensure that members of the pg_read_all_stats role can read all statistics views. - Fix performance regression in information_schema.triggers view. - Fix memory leak in libpq when using sslmode=verify-full. - Fix crash in psql when attempting to re-establish a failed connection. - Allow tab-completion of the filename argument to \gx command in psql. - Add pg_dump support for ALTER ... DEPENDS ON EXTENSION. - Several other fixes for pg_dump, which include dumping comments on RLS policies and postponing restore of event triggers until the end. - Ensure pg_basebackup generates valid tar files. - pg_checksums skips tablespace subdirectories that belong to a different PostgreSQL major version - Several Windows compatibility fixes This update also contains timezone tzdata release 2020a for DST law changes in Morocco and the Canadian Yukon, plus historical corrections for Shanghai. The America/Godthab zone has been renamed to America/Nuuk to reflect current English usage ; however, the old name remains available as a compatibility link. This also updates initdb's list of known Windows time zone names to include recent additions. For more details, check out: - https://www.postgresql.org/docs/12/release-12-3.html Other fixes: - Let postgresqlXX conflict with postgresql-noarch < 12.0.1 to get a clean and complete cutover to the new packaging schema. Family: unix Class: patch Status: Reference(s): 1044231 1051510 1051858 1056686 1060463 1065729 1076907 1085780 1091376 1098998 1100079 1100081 1100082 1100780 1103990 1103992 1104036 1104353 1104745 1109837 1111666 1111974 1112178 1112374 1113956 1114279 1114685 1119680 1125330 1126826 1126829 1126831 1127611 1129821 1130262 1133021 1133534 1134090 1136157 1140126 1140844 1141861 1141862 1141895 1142649 1143609 1144333 1146098 1146105 1146107 1146539 1148643 1152990 1152992 1152994 1152995 1153768 1153770 1156510 1157424 1157755 1158187 1159285 1160254 1160590 1160659 1161561 1161951 1162396 1162928 1162929 1162931 1163333 1163744 1163985 1164078 1164507 1164804 1165111 1165404 1165488 1165527 1165741 1165813 1165873 1165929 1165950 1165980 1165984 1165985 1166003 1166101 1166102 1166103 1166104 1166632 1166658 1166730 1166731 1166732 1166733 1166734 1166735 1171924 1176069 1178512 1179036 CVE-2009-2694 CVE-2009-2703 CVE-2009-3026 CVE-2009-3083 CVE-2009-3084 CVE-2009-3085 CVE-2009-3615 CVE-2010-0013 CVE-2010-0277 CVE-2010-0420 CVE-2010-0423 CVE-2010-1624 CVE-2010-2528 CVE-2010-3711 CVE-2011-1091 CVE-2011-3594 CVE-2012-1174 CVE-2012-2214 CVE-2012-3374 CVE-2012-6152 CVE-2012-6708 CVE-2013-0271 CVE-2013-0272 CVE-2013-0273 CVE-2013-0274 CVE-2013-2002 CVE-2013-2005 CVE-2013-4288 CVE-2013-6477 CVE-2013-6478 CVE-2013-6479 CVE-2013-6481 CVE-2013-6482 CVE-2013-6483 CVE-2013-6484 CVE-2013-6485 CVE-2013-6486 CVE-2013-6487 CVE-2014-0020 CVE-2014-3641 CVE-2014-4607 CVE-2015-9251 CVE-2018-12359 CVE-2018-12360 CVE-2018-12362 CVE-2018-12363 CVE-2018-12364 CVE-2018-12365 CVE-2018-12366 CVE-2018-12372 CVE-2018-12373 CVE-2018-12374 CVE-2018-18335 CVE-2018-18356 CVE-2018-18506 CVE-2018-18509 CVE-2018-5188 CVE-2019-12972 CVE-2019-14250 CVE-2019-14444 CVE-2019-15845 CVE-2019-16201 CVE-2019-16254 CVE-2019-16255 CVE-2019-17450 CVE-2019-17451 CVE-2019-19768 CVE-2019-5785 CVE-2019-9074 CVE-2019-9075 CVE-2019-9077 CVE-2019-9788 CVE-2019-9790 CVE-2019-9791 CVE-2019-9792 CVE-2019-9793 CVE-2019-9794 CVE-2019-9795 CVE-2019-9796 CVE-2019-9801 CVE-2019-9810 CVE-2019-9813 CVE-2019-9848 CVE-2019-9849 CVE-2019-9850 CVE-2019-9851 CVE-2019-9852 CVE-2020-14386 CVE-2020-1720 CVE-2020-28196 CVE-2020-8130 CVE-2020-8647 CVE-2020-8648 CVE-2020-8649 CVE-2020-9383 SUSE-SU-2018:2174-1 SUSE-SU-2018:2641-1 SUSE-SU-2019:0853-1 SUSE-SU-2019:2231-1 SUSE-SU-2020:0737-1 SUSE-SU-2020:0836-1 SUSE-SU-2020:2149-1 SUSE-SU-2020:2577-1 SUSE-SU-2020:3377-1 SUSE-SU-2020:3552-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information openstack-cinder-2014.2.3.dev13-1 is installed OR openstack-cinder-volume-2014.2.3.dev13-1 is installed OR python-cinder-2014.2.3.dev13-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information xen-4.1.6_02-0.5.1 is installed OR xen-doc-html-4.1.6_02-0.5.1 is installed OR xen-doc-pdf-4.1.6_02-0.5.1 is installed OR xen-kmp-default-4.1.6_02_3.0.93_0.5-0.5.1 is installed OR xen-kmp-pae-4.1.6_02_3.0.93_0.5-0.5.1 is installed OR xen-kmp-trace-4.1.6_02_3.0.93_0.5-0.5.1 is installed OR xen-libs-4.1.6_02-0.5.1 is installed OR xen-libs-32bit-4.1.6_02-0.5.1 is installed OR xen-tools-4.1.6_02-0.5.1 is installed OR xen-tools-domU-4.1.6_02-0.5.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information finch-2.10.9-5 is installed OR libpurple-2.10.9-5 is installed OR libpurple-lang-2.10.9-5 is installed OR libpurple-meanwhile-2.10.9-5 is installed OR libpurple-tcl-2.10.9-5 is installed OR pidgin-2.10.9-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND bogofilter-1.2.4-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information avahi-0.6.32-30 is installed OR avahi-lang-0.6.32-30 is installed OR libavahi-client3-0.6.32-30 is installed OR libavahi-client3-32bit-0.6.32-30 is installed OR libavahi-common3-0.6.32-30 is installed OR libavahi-common3-32bit-0.6.32-30 is installed OR libavahi-core7-0.6.32-30 is installed OR libdns_sd-0.6.32-30 is installed OR libdns_sd-32bit-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information at-3.1.14-7 is installed OR libQtWebKit4-4.8.6+2.3.3-3 is installed OR libQtWebKit4-32bit-4.8.6+2.3.3-3 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR libnm-glib-vpn1-1.0.12-13.6 is installed OR libnm-glib4-1.0.12-13.6 is installed OR libnm-util2-1.0.12-13.6 is installed OR libnm0-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed OR typelib-1_0-NMClient-1_0-1.0.12-13.6 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-13.6 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND python-PyYAML-3.10-15.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND hawk2-1.0.1+git.1456406635.49e230d-12.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information cluster-md-kmp-default-4.4.21-69 is installed OR cluster-network-kmp-default-4.4.21-69 is installed OR dlm-kmp-default-4.4.21-69 is installed OR gfs2-kmp-default-4.4.21-69 is installed OR ocfs2-kmp-default-4.4.21-69 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information libpacemaker3-1.1.16-4 is installed OR pacemaker-1.1.16-4 is installed OR pacemaker-cli-1.1.16-4 is installed OR pacemaker-cts-1.1.16-4 is installed OR pacemaker-remote-1.1.16-4 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information cluster-md-kmp-default-4.12.14-94.41 is installed OR dlm-kmp-default-4.12.14-94.41 is installed OR gfs2-kmp-default-4.12.14-94.41 is installed OR ocfs2-kmp-default-4.12.14-94.41 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information ImageMagick-config-6-SUSE-6.8.8.1-71.126 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.126 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.126 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.126 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_38-44-default-1-2.2 is installed OR kgraft-patch-3_12_38-44-xen-1-2.2 is installed OR kgraft-patch-SLE12_Update_3-1-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information salt-2016.11.4-45.2 is installed OR salt-api-2016.11.4-45.2 is installed OR salt-bash-completion-2016.11.4-45.2 is installed OR salt-cloud-2016.11.4-45.2 is installed OR salt-doc-2016.11.4-45.2 is installed OR salt-master-2016.11.4-45.2 is installed OR salt-minion-2016.11.4-45.2 is installed OR salt-proxy-2016.11.4-45.2 is installed OR salt-ssh-2016.11.4-45.2 is installed OR salt-syndic-2016.11.4-45.2 is installed OR salt-zsh-completion-2016.11.4-45.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND docker-1.10.3-66.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-66.3 is installed OR libopenssl0_9_8-0.9.8j-66.3 is installed OR libopenssl0_9_8-32bit-0.9.8j-66.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libecpg6-12.3-3.8 is installed OR postgresql-12.0.1-8.14 is installed OR postgresql-contrib-12.0.1-8.14 is installed OR postgresql-devel-12.0.1-8.14 is installed OR postgresql-docs-12.0.1-8.14 is installed OR postgresql-plperl-12.0.1-8.14 is installed OR postgresql-plpython-12.0.1-8.14 is installed OR postgresql-pltcl-12.0.1-8.14 is installed OR postgresql-server-12.0.1-8.14 is installed OR postgresql-server-devel-12.0.1-8.14 is installed OR postgresql12-12.3-3.8 is installed OR postgresql12-contrib-12.3-3.8 is installed OR postgresql12-devel-12.3-3.8 is installed OR postgresql12-docs-12.3-3.8 is installed OR postgresql12-plperl-12.3-3.8 is installed OR postgresql12-plpython-12.3-3.8 is installed OR postgresql12-pltcl-12.3-3.8 is installed OR postgresql12-server-12.3-3.8 is installed OR postgresql12-server-devel-12.3-3.8 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed AND Package Information MozillaFirefox-68.3.0-109.98 is installed OR MozillaFirefox-devel-68.3.0-109.98 is installed OR MozillaFirefox-translations-common-68.3.0-109.98 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND mipv6d-2.0.2.umip.0.4-8.7.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND krb5-1.6.3-133.49.62.1 is installed OR krb5-32bit-1.6.3-133.49.62.1 is installed OR krb5-apps-clients-1.6.3-133.49.62.1 is installed OR krb5-apps-servers-1.6.3-133.49.62.1 is installed OR krb5-client-1.6.3-133.49.62.1 is installed OR krb5-doc-1.6.3-133.49.62.1 is installed OR krb5-plugin-kdb-ldap-1.6.3-133.49.62.1 is installed OR krb5-plugin-preauth-pkinit-1.6.3-133.49.62.1 is installed OR krb5-server-1.6.3-133.49.62.1 is installed OR krb5-x86-1.6.3-133.49.62.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND krb5-1.6.3-133.49.62.1 is installed OR krb5-32bit-1.6.3-133.49.62.1 is installed OR krb5-apps-clients-1.6.3-133.49.62.1 is installed OR krb5-apps-servers-1.6.3-133.49.62.1 is installed OR krb5-client-1.6.3-133.49.62.1 is installed OR krb5-doc-1.6.3-133.49.62.1 is installed OR krb5-plugin-kdb-ldap-1.6.3-133.49.62.1 is installed OR krb5-plugin-preauth-pkinit-1.6.3-133.49.62.1 is installed OR krb5-server-1.6.3-133.49.62.1 is installed OR krb5-x86-1.6.3-133.49.62.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND LibVNCServer-0.9.1-154.24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information openvpn-2.3.2-11.1 is installed OR openvpn-auth-pam-plugin-2.3.2-11.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information strongswan-5.1.3-18 is installed OR strongswan-doc-5.1.3-18 is installed OR strongswan-hmac-5.1.3-18 is installed OR strongswan-ipsec-5.1.3-18 is installed OR strongswan-libs0-5.1.3-18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND SuSEfirewall2-3.6.312.333-3.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_44-52_18-default-6-2.2 is installed OR kgraft-patch-3_12_44-52_18-xen-6-2.2 is installed OR kgraft-patch-SLE12_Update_7-6-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information libX11-1.6.2-11 is installed OR libX11-6-1.6.2-11 is installed OR libX11-data-1.6.2-11 is installed OR libX11-xcb1-1.6.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information binutils-2.35.1-6.15 is installed OR binutils-devel-2.35.1-6.15 is installed OR binutils-devel-32bit-2.35.1-6.15 is installed OR libctf-nobfd0-2.35.1-6.15 is installed OR libctf0-2.35.1-6.15 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND rubygem-rack-ssl-1.3.2-0.12.5.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information libvirt-1.2.5-12.3 is installed OR libvirt-devel-1.2.5-12.3 is installed OR libvirt-devel-32bit-1.2.5-12.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND polkit-devel-0.112-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND automake-1.13.4-4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-33 is installed OR ImageMagick-devel-6.8.8.1-33 is installed OR libMagick++-6_Q16-3-6.8.8.1-33 is installed OR libMagick++-devel-6.8.8.1-33 is installed OR perl-PerlMagick-6.8.8.1-33 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information DirectFB-devel-1.7.1-6 is installed OR lib++dfb-devel-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-52.9.1-3.7 is installed OR MozillaThunderbird-devel-52.9.1-3.7 is installed OR MozillaThunderbird-translations-common-52.9.1-3.7 is installed OR MozillaThunderbird-translations-other-52.9.1-3.7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.37 is installed OR kernel-default-extra-4.12.14-197.37 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information kernel-default-5.3.18-24.15 is installed OR kernel-default-extra-5.3.18-24.15 is installed
BACK