postgresql:13 security update

エラータID: AXSA:2022-3791:01

リリース日: 
2022/09/05 Monday - 02:39
題名: 
postgresql:13 security update
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- PostgreSQL の Autovacuum 機能、REINDEX・CREATE INDEX・
REFRESH MATERIALIZED VIEW・CLUSTER の各 SQL 文、
および pg_amcheck コマンドには、オブジェクト保護機能に
問題があるため、少なくとも一つ以上のオブジェクトに書き込み
権限を持つ攻撃者により、 任意の SQL 文の実行を可能とする
脆弱性が存在します。(CVE-2022-1552)

Modularity name: postgresql
Stream name: 13

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2022-1552
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. pgaudit-1.5.0-1.module+el8+1513+43c3d710.src.rpm
    MD5: 1abc993983442b6dfc979170d8793c57
    SHA-256: d929803b72c96d08176bca707073d400c09390925448c69283bc86059b4ff4c9
    Size: 42.60 kB
  2. pg_repack-1.4.6-3.module+el8+1513+43c3d710.src.rpm
    MD5: f6d09a0b43fc446945eae46f32a05dc8
    SHA-256: cd354694ff077eda5de66e335e48f817d6f6bc19b4b74f947d352867596ae42e
    Size: 100.99 kB
  3. postgres-decoderbufs-0.10.0-2.module+el8+1513+43c3d710.src.rpm
    MD5: ba9de6d2d06b6f236399a4d183f0b9bb
    SHA-256: 3adc0e1e93d7a715f1265bbfb6cb0786ed37b67f49fb5d9efaedabca75e12dc0
    Size: 21.13 kB
  4. postgresql-13.7-2.module+el8+1513+43c3d710.ML.1.src.rpm
    MD5: a9bf10f1caf6b65b05234f02f6a1eb5b
    SHA-256: ac0b1474794af7f70b9da75ae3ddc720792497e37d0b2265dfa93f5f41425264
    Size: 47.97 MB

Asianux Server 8 for x86_64
  1. pgaudit-1.5.0-1.module+el8+1513+43c3d710.x86_64.rpm
    MD5: 394682f6bd246c56800050cb84741d85
    SHA-256: 5cc8c5e22f7fff08ae92f445795c76e989b86a438ada3786cbfc444fdbb408ff
    Size: 27.03 kB
  2. pgaudit-debugsource-1.5.0-1.module+el8+1513+43c3d710.x86_64.rpm
    MD5: eeb513749895da45dc74ac3c99b5b9d2
    SHA-256: 3e1d311bdd22c1d672a4a4d50d78dba6f1ab0416f802012f136cdbec519aa86d
    Size: 22.80 kB
  3. pg_repack-1.4.6-3.module+el8+1513+43c3d710.x86_64.rpm
    MD5: 3a186583a0489d57929fcb763d32fbb6
    SHA-256: 9eb1e534cb99ed3edbe1a7a4b5f3647e2da3c1d39b2eecade8c3f1e8841d8d7f
    Size: 89.53 kB
  4. pg_repack-debugsource-1.4.6-3.module+el8+1513+43c3d710.x86_64.rpm
    MD5: 2ebe8761483f47c43aa0530432c62d95
    SHA-256: ee5a6eebe4eddf87c77f5f7deeb91cd3dedd85efd83c0b0d83125b21ddca035f
    Size: 49.69 kB
  5. postgres-decoderbufs-0.10.0-2.module+el8+1513+43c3d710.x86_64.rpm
    MD5: 433a2ed7e07ecaa4574b425a6b759067
    SHA-256: b3e2bf9fe8f2ddbd91a44eb06052d32395ad0123c7167a000b45773793346bff
    Size: 21.89 kB
  6. postgres-decoderbufs-debugsource-0.10.0-2.module+el8+1513+43c3d710.x86_64.rpm
    MD5: 106b435ba9cd24c00c773954aad9efd1
    SHA-256: de7b8607ffc94255d8acebf50a31a4804db572156032c3c39cb1a0c0dacf81da
    Size: 16.81 kB
  7. postgresql-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: bb05733da5fce1f27af04b2340cf1f23
    SHA-256: 8bfc93234b3d41bd4b17f821bea83194423adb5d237377f987ea1dd318afb336
    Size: 1.54 MB
  8. postgresql-contrib-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: 51195955995bf54bb7b5ebfac86e7e5e
    SHA-256: 628892c9a35d3dc61f54fec713fb1835a307b8ed10855f875b97cfb31e54fc37
    Size: 876.11 kB
  9. postgresql-debugsource-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: 5e3b8de5f902fd815289d2381d808dca
    SHA-256: 71f0476abe564e41ac5c34db735611cb91b4229f1b808d799c3cac0785c60fae
    Size: 17.65 MB
  10. postgresql-docs-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: 4ac671acf63184c97658c6f8ef115598
    SHA-256: 4a2361e63baab0486be944c72e9cea24ff9f0e3495c5c64a83d4ad6f58c47120
    Size: 9.67 MB
  11. postgresql-plperl-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: 8604bbc50887d6a1f58c68830657f5b3
    SHA-256: 39d64ed31169be2f22bfb0b1e5957cb79e870655cbeb6e8efa239137d025f528
    Size: 112.14 kB
  12. postgresql-plpython3-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: 4dc89008dcc8fa8272afa4e88e33397c
    SHA-256: c4e8195155a743ef2c6574bdae231a5c705ab018689ebb8add187461d220a09c
    Size: 128.05 kB
  13. postgresql-pltcl-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: f94eb332800acd08ffb4fa850044795c
    SHA-256: 407586215b4821ea61d519b9605326a6717e7f4105f7e65a6d7efe85a5b87a56
    Size: 84.98 kB
  14. postgresql-server-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: d08288c5e69b20a18d41e453e076bbf4
    SHA-256: 0392f5cec9da9aa0660d718b434af65072b0d6b10f9ded1ffb0795c8fa661dda
    Size: 5.65 MB
  15. postgresql-server-devel-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: 0c62c130b714c81d63d3cda836798fdb
    SHA-256: 0852499554facc028b21e90e6d93b1b0b6313534c9311a49ae6161cb5106d949
    Size: 1.25 MB
  16. postgresql-static-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: f2e87e57a404b9471c76058cbd48efe7
    SHA-256: 876dc1d54b8127e5b6c06932a068e1a0da469b8c1e62709fb38cf06248cfed50
    Size: 189.41 kB
  17. postgresql-test-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: 5a2de85f819a935d550d3fa9807eeb26
    SHA-256: e64ced1110d9f73bdd8239ad89bc8ad2d0e8a6c982bc57ef2d10a04c5433ed45
    Size: 2.01 MB
  18. postgresql-test-rpm-macros-13.7-2.module+el8+1513+43c3d710.ML.1.noarch.rpm
    MD5: 9e068899f448830234eff1ae20af5746
    SHA-256: 360cd80962e1f418f50c6b8f322a81e93165bb81372c6def158f1e265a63e451
    Size: 52.55 kB
  19. postgresql-upgrade-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: 9c56b86212fdc170df38568f146ef344
    SHA-256: 09a13412624082b95656f4665c52217a669d8eb822bca256e4e8bd6fc51e18c2
    Size: 4.37 MB
  20. postgresql-upgrade-devel-13.7-2.module+el8+1513+43c3d710.ML.1.x86_64.rpm
    MD5: 023f39ffce18965e54e97d243023d7b7
    SHA-256: 28a2ddd170a07d8dc133f40330252555f55fb68b42ad68c6e07060f44feebd59
    Size: 1.10 MB