Oval Definition:oval:org.opensuse.security:def:5489
Revision Date:2020-12-02Version:1
Title:Security update for postgresql10 and postgresql12 (Moderate)
Description:

This update for postgresql10 and postgresql12 fixes the following issues:

postgresql10 was updated to 10.13 (bsc#1171924).

https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/10/release-10-13.html

postgresql10 was updated to 10.12 (CVE-2020-1720, bsc#1163985)

- https://www.postgresql.org/about/news/2011/ - https://www.postgresql.org/docs/10/release-10-12.html

postgresql10 was updated to 10.11:

- https://www.postgresql.org/about/news/1994/ - https://www.postgresql.org/docs/10/release-10-11.html



postgresql12 was updated to 12.3 (bsc#1171924).

Bug Fixes and Improvements:

- Several fixes for GENERATED columns, including an issue where it was possible to crash or corrupt data in a table when the output of the generated column was the exact copy of a physical column on the table, e.g. if the expression called a function which could return its own input. - Several fixes for ALTER TABLE, including ensuring the SET STORAGE directive is propagated to a table's indexes. - Fix a potential race condition when using DROP OWNED BY while another session is deleting the same objects. - Allow for a partition to be detached when it has inherited ROW triggers. - Several fixes for REINDEX CONCURRENTLY, particularly with issues when a REINDEX CONCURRENTLY operation fails. - Fix crash when COLLATE is applied to an uncollatable type in a partition bound expression. - Fix performance regression in floating point overflow/underflow detection. - Several fixes for full text search, particularly with phrase searching. - Fix query-lifespan memory leak for a set-returning function used in a query's FROM clause. - Several reporting fixes for the output of VACUUM VERBOSE. - Allow input of type circle to accept the format (x,y),r, which is specified in the documentation. - Allow for the get_bit() and set_bit() functions to not fail on bytea strings longer than 256MB. - Avoid premature recycling of WAL segments during crash recovery, which could lead to WAL segments being recycled before being archived. - Avoid attempting to fetch nonexistent WAL files from archive storage during recovery by skipping irrelevant timelines. - Several fixes for logical replication and replication slots. - Fix several race conditions in synchronous standby management, including one that occurred when changing the synchronous_standby_names setting. - Several fixes for GSSAPI support, include a fix for a memory leak that occurred when using GSSAPI encryption. - Ensure that members of the pg_read_all_stats role can read all statistics views. - Fix performance regression in information_schema.triggers view. - Fix memory leak in libpq when using sslmode=verify-full. - Fix crash in psql when attempting to re-establish a failed connection. - Allow tab-completion of the filename argument to \gx command in psql. - Add pg_dump support for ALTER ... DEPENDS ON EXTENSION. - Several other fixes for pg_dump, which include dumping comments on RLS policies and postponing restore of event triggers until the end. - Ensure pg_basebackup generates valid tar files. - pg_checksums skips tablespace subdirectories that belong to a different PostgreSQL major version - Several Windows compatibility fixes

This update also contains timezone tzdata release 2020a for DST law changes in Morocco and the Canadian Yukon, plus historical corrections for Shanghai. The America/Godthab zone has been renamed to America/Nuuk to reflect current English usage ; however, the old name remains available as a compatibility link. This also updates initdb's list of known Windows time zone names to include recent additions.

For more details, check out:

- https://www.postgresql.org/docs/12/release-12-3.html

Other fixes:

- Let postgresqlXX conflict with postgresql-noarch < 12.0.1 to get a clean and complete cutover to the new packaging schema.
Family:unixClass:patch
Status:Reference(s):1148643
1161335
1163985
1171924
1176625
CVE-2004-2771
CVE-2009-0790
CVE-2010-3609
CVE-2010-4000
CVE-2010-4530
CVE-2012-2388
CVE-2012-4559
CVE-2012-4560
CVE-2012-4561
CVE-2013-0176
CVE-2013-2003
CVE-2013-2944
CVE-2013-4143
CVE-2013-5018
CVE-2013-6075
CVE-2013-6076
CVE-2014-0017
CVE-2014-2338
CVE-2014-3467
CVE-2014-3468
CVE-2014-3469
CVE-2014-7202
CVE-2014-7203
CVE-2014-7844
CVE-2014-8104
CVE-2014-8132
CVE-2014-9087
CVE-2014-9221
CVE-2014-9721
CVE-2015-2590
CVE-2015-2597
CVE-2015-2601
CVE-2015-2613
CVE-2015-2619
CVE-2015-2621
CVE-2015-2625
CVE-2015-2627
CVE-2015-2628
CVE-2015-2632
CVE-2015-2637
CVE-2015-2638
CVE-2015-2659
CVE-2015-2664
CVE-2015-2806
CVE-2015-2808
CVE-2015-3146
CVE-2015-4000
CVE-2015-4171
CVE-2015-4729
CVE-2015-4731
CVE-2015-4732
CVE-2015-4733
CVE-2015-4734
CVE-2015-4736
CVE-2015-4748
CVE-2015-4749
CVE-2015-4760
CVE-2015-4803
CVE-2015-4805
CVE-2015-4806
CVE-2015-4810
CVE-2015-4835
CVE-2015-4840
CVE-2015-4842
CVE-2015-4843
CVE-2015-4844
CVE-2015-4860
CVE-2015-4868
CVE-2015-4872
CVE-2015-4881
CVE-2015-4882
CVE-2015-4883
CVE-2015-4893
CVE-2015-4901
CVE-2015-4902
CVE-2015-4903
CVE-2015-4906
CVE-2015-4908
CVE-2015-4911
CVE-2015-4916
CVE-2015-7575
CVE-2015-8126
CVE-2016-0402
CVE-2016-0448
CVE-2016-0466
CVE-2016-0475
CVE-2016-0483
CVE-2016-0494
CVE-2016-0636
CVE-2016-0686
CVE-2016-0687
CVE-2016-0695
CVE-2016-0739
CVE-2016-3425
CVE-2016-3426
CVE-2016-3427
CVE-2016-3458
CVE-2016-3485
CVE-2016-3498
CVE-2016-3500
CVE-2016-3503
CVE-2016-3508
CVE-2016-3511
CVE-2016-3550
CVE-2016-3552
CVE-2016-3587
CVE-2016-3598
CVE-2016-3606
CVE-2016-3610
CVE-2016-4574
CVE-2016-4579
CVE-2020-1720
SUSE-SU-2020:2149-1
SUSE-SU-2020:2814-1
Platform(s):openSUSE 13.1
openSUSE 13.1 NonFree
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise for SAP 12
SUSE Linux Enterprise for SAP 12 SP1
SUSE Linux Enterprise High Availability 12 SP5
SUSE Linux Enterprise High Availability Extension 11 SP3
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Live Patching 12 SP3
SUSE Linux Enterprise Module for Advanced Systems Management 12
SUSE Linux Enterprise Module for Containers 12
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Server 11 SP1-LTSS
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP2-LTSS
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12 SP1
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Software Development Kit 11 SP2
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP4
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 12 SP2
Product(s):
Definition Synopsis
  • SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed
  • AND Package Information
  • conntrack-tools-1.4.2-5.2 is installed
  • OR libnetfilter_cthelper-1.0.0-7.1 is installed
  • OR libnetfilter_cthelper0-1.0.0-7.1 is installed
  • OR libnetfilter_cttimeout-1.0.0-9.1 is installed
  • OR libnetfilter_cttimeout1-1.0.0-9.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • xen-4.2.3_02-0.7.1 is installed
  • OR xen-doc-html-4.2.3_02-0.7.1 is installed
  • OR xen-doc-pdf-4.2.3_02-0.7.1 is installed
  • OR xen-kmp-default-4.2.3_02_3.0.93_0.8-0.7.1 is installed
  • OR xen-kmp-pae-4.2.3_02_3.0.93_0.8-0.7.1 is installed
  • OR xen-libs-4.2.3_02-0.7.1 is installed
  • OR xen-libs-32bit-4.2.3_02-0.7.1 is installed
  • OR xen-tools-4.2.3_02-0.7.1 is installed
  • OR xen-tools-domU-4.2.3_02-0.7.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • libtasn1-3.7-4 is installed
  • OR libtasn1-6-3.7-4 is installed
  • OR libtasn1-6-32bit-3.7-4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • gnome-shell-3.20.4-70 is installed
  • OR gnome-shell-browser-plugin-3.20.4-70 is installed
  • OR gnome-shell-calendar-3.20.4-70 is installed
  • OR gnome-shell-lang-3.20.4-70 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • cups-pk-helper-0.2.5-5 is installed
  • OR cups-pk-helper-lang-0.2.5-5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND bogofilter-1.2.4-5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_55-52_45-default-2-2.3 is installed
  • OR kgraft-patch-3_12_55-52_45-xen-2-2.3 is installed
  • OR kgraft-patch-SLE12_Update_13-2-2.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 SP1 is installed
  • AND Package Information
  • MozillaFirefox-52.2.0esr-108.3 is installed
  • OR MozillaFirefox-branding-SLE-52-31.1 is installed
  • OR MozillaFirefox-devel-52.2.0esr-108.3 is installed
  • OR MozillaFirefox-translations-52.2.0esr-108.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP5 is installed
  • AND haproxy-1.6.11-10 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability Extension 11 SP3 is installed
  • AND Package Information
  • gnutls-2.4.1-24.39.60.1 is installed
  • OR libgnutls-extra26-2.4.1-24.39.60.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • AND ipsec-tools-0.8.0-19.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 SP3 is installed
  • AND Package Information
  • kgraft-patch-4_4_82-6_3-default-6-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_1-6-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed
  • AND Package Information
  • puppet-3.8.5-15.3.3 is installed
  • OR puppet-server-3.8.5-15.3.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 12 is installed
  • AND python-PyYAML-3.10-15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 12 is installed
  • AND Package Information
  • compat-openssl098-0.9.8j-66.3 is installed
  • OR libopenssl0_9_8-0.9.8j-66.3 is installed
  • OR libopenssl0_9_8-32bit-0.9.8j-66.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 12 is installed
  • AND python-PyYAML-3.10-15.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 12 is installed
  • AND Package Information
  • apache2-mod_php5-5.5.14-22.1 is installed
  • OR php5-5.5.14-22.1 is installed
  • OR php5-bcmath-5.5.14-22.1 is installed
  • OR php5-bz2-5.5.14-22.1 is installed
  • OR php5-calendar-5.5.14-22.1 is installed
  • OR php5-ctype-5.5.14-22.1 is installed
  • OR php5-curl-5.5.14-22.1 is installed
  • OR php5-dba-5.5.14-22.1 is installed
  • OR php5-dom-5.5.14-22.1 is installed
  • OR php5-enchant-5.5.14-22.1 is installed
  • OR php5-exif-5.5.14-22.1 is installed
  • OR php5-fastcgi-5.5.14-22.1 is installed
  • OR php5-fileinfo-5.5.14-22.1 is installed
  • OR php5-fpm-5.5.14-22.1 is installed
  • OR php5-ftp-5.5.14-22.1 is installed
  • OR php5-gd-5.5.14-22.1 is installed
  • OR php5-gettext-5.5.14-22.1 is installed
  • OR php5-gmp-5.5.14-22.1 is installed
  • OR php5-iconv-5.5.14-22.1 is installed
  • OR php5-intl-5.5.14-22.1 is installed
  • OR php5-json-5.5.14-22.1 is installed
  • OR php5-ldap-5.5.14-22.1 is installed
  • OR php5-mbstring-5.5.14-22.1 is installed
  • OR php5-mcrypt-5.5.14-22.1 is installed
  • OR php5-mysql-5.5.14-22.1 is installed
  • OR php5-odbc-5.5.14-22.1 is installed
  • OR php5-openssl-5.5.14-22.1 is installed
  • OR php5-pcntl-5.5.14-22.1 is installed
  • OR php5-pdo-5.5.14-22.1 is installed
  • OR php5-pear-5.5.14-22.1 is installed
  • OR php5-pgsql-5.5.14-22.1 is installed
  • OR php5-pspell-5.5.14-22.1 is installed
  • OR php5-shmop-5.5.14-22.1 is installed
  • OR php5-snmp-5.5.14-22.1 is installed
  • OR php5-soap-5.5.14-22.1 is installed
  • OR php5-sockets-5.5.14-22.1 is installed
  • OR php5-sqlite-5.5.14-22.1 is installed
  • OR php5-suhosin-5.5.14-22.1 is installed
  • OR php5-sysvmsg-5.5.14-22.1 is installed
  • OR php5-sysvsem-5.5.14-22.1 is installed
  • OR php5-sysvshm-5.5.14-22.1 is installed
  • OR php5-tokenizer-5.5.14-22.1 is installed
  • OR php5-wddx-5.5.14-22.1 is installed
  • OR php5-xmlreader-5.5.14-22.1 is installed
  • OR php5-xmlrpc-5.5.14-22.1 is installed
  • OR php5-xmlwriter-5.5.14-22.1 is installed
  • OR php5-xsl-5.5.14-22.1 is installed
  • OR php5-zip-5.5.14-22.1 is installed
  • OR php5-zlib-5.5.14-22.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • AND Package Information
  • MozillaFirefox-24.5.0esr-0.3.1 is installed
  • OR MozillaFirefox-branding-SLED-24-0.4.10.14 is installed
  • OR MozillaFirefox-translations-24.5.0esr-0.3.1 is installed
  • OR libfreebl3-3.16-0.3.1 is installed
  • OR libfreebl3-32bit-3.16-0.3.1 is installed
  • OR mozilla-nspr-4.10.4-0.3.1 is installed
  • OR mozilla-nspr-32bit-4.10.4-0.3.1 is installed
  • OR mozilla-nss-3.16-0.3.1 is installed
  • OR mozilla-nss-32bit-3.16-0.3.1 is installed
  • OR mozilla-nss-tools-3.16-0.3.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND NetworkManager-gnome-0.7.1-5.22.28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND NetworkManager-gnome-0.7.1-5.22.28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND Package Information
  • MozillaFirefox-31.7.0esr-0.8.1 is installed
  • OR MozillaFirefox-translations-31.7.0esr-0.8.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND Package Information
  • apache-commons-daemon-1.0.15-4 is installed
  • OR apache-commons-daemon-javadoc-1.0.15-4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • augeas-1.2.0-3 is installed
  • OR augeas-lenses-1.2.0-3 is installed
  • OR libaugeas0-1.2.0-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND sudo-1.8.10p3-2.16.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • libXi-1.7.4-17.1 is installed
  • OR libXi6-1.7.4-17.1 is installed
  • OR libXi6-32bit-1.7.4-17.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • openssh-7.2p2-69 is installed
  • OR openssh-fips-7.2p2-69 is installed
  • OR openssh-helpers-7.2p2-69 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • audiofile-0.3.6-10 is installed
  • OR libaudiofile1-0.3.6-10 is installed
  • OR libaudiofile1-32bit-0.3.6-10 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND Package Information
  • MozillaFirefox-45.4.0esr-81 is installed
  • OR MozillaFirefox-translations-45.4.0esr-81 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed
  • AND Package Information
  • kgraft-patch-3_12_67-60_64_18-default-8-3 is installed
  • OR kgraft-patch-3_12_67-60_64_18-xen-8-3 is installed
  • OR kgraft-patch-SLE12-SP1_Update_9-8-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • libecpg6-10.13-4.22 is installed
  • OR libpq5-10.13-4.22 is installed
  • OR libpq5-32bit-10.13-4.22 is installed
  • OR postgresql-12.0.1-8.14 is installed
  • OR postgresql-contrib-12.0.1-8.14 is installed
  • OR postgresql-devel-12.0.1-8.14 is installed
  • OR postgresql-docs-12.0.1-8.14 is installed
  • OR postgresql-plperl-12.0.1-8.14 is installed
  • OR postgresql-plpython-12.0.1-8.14 is installed
  • OR postgresql-pltcl-12.0.1-8.14 is installed
  • OR postgresql-server-12.0.1-8.14 is installed
  • OR postgresql10-10.13-4.22 is installed
  • OR postgresql10-contrib-10.13-4.22 is installed
  • OR postgresql10-devel-10.13-4.22 is installed
  • OR postgresql10-docs-10.13-4.22 is installed
  • OR postgresql10-plperl-10.13-4.22 is installed
  • OR postgresql10-plpython-10.13-4.22 is installed
  • OR postgresql10-pltcl-10.13-4.22 is installed
  • OR postgresql10-server-10.13-4.22 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
  • AND automake-1.10.1-4.131.9.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND Package Information
  • fileshareset-2.0-20.31 is installed
  • OR kdebase3-3.5.10-20.31 is installed
  • OR kdebase3-32bit-3.5.10-20.31 is installed
  • OR kdebase3-devel-3.5.10-20.31 is installed
  • OR kdebase3-runtime-32bit-3.5.10-20.31 is installed
  • OR misc-console-font-3.5.10-20.31 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 is installed
  • AND bind-devel-9.9.5P1-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND libproxy-devel-0.4.13-16 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND LibVNCServer-devel-0.9.9-17.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 is installed
  • AND Package Information
  • freerdp-1.0.2-7 is installed
  • OR libfreerdp-1_0-1.0.2-7 is installed
  • OR libfreerdp-1_0-plugins-1.0.2-7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
  • AND bogofilter-1.2.4-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP2 is installed
  • AND Package Information
  • imap-2007e_suse-22.1 is installed
  • OR libc-client2007e_suse-2007e_suse-22.1 is installed
  • BACK