postgresql:15 security update

エラータID: AXSA:2023-6293:01

リリース日: 
2023/08/04 Friday - 02:50
題名: 
postgresql:15 security update
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- PostgreSQL には、schema_element として設定した SQL 文によって
search_path の変更の保護を無効化できてしまう問題があるため、データ
ベースの管理権限を持つ認証されたリモートの攻撃者により、細工された
データベースを介して、任意のコードの実行を可能とする脆弱性が存在
します。(CVE-2023-2454)

- PostgreSQL には、特定の状況下で誤ったセキュリティポリシーが適用
されてしまう問題があるため、リモートの攻撃者により、不正な更新や
読み取りを可能とする脆弱性が存在します。(CVE-2023-2455)

Modularity name: postgresql
Stream name: 15

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2023-2454
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
CVE-2023-2455
Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other roles. This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications. This affects only databases that have used CREATE POLICY to define a row security policy.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. pgaudit-1.7.0-1.module+el9+1014+69379869.src.rpm
    MD5: 6a1edd44b3f9fc01e69fc2fdcd0e3c97
    SHA-256: 0a4e814c223538dea7454dc87c8e93beb8f978ca76b12772fafa828cfdaf3b2e
    Size: 51.24 kB
  2. pg_repack-1.4.8-1.module+el9+1014+69379869.src.rpm
    MD5: b016a58ff63a4e3529d35c4f420130e6
    SHA-256: decdfeb9d6a797b106fe51ac938beddcd816a32f1b49d0aa5346af35c6e63d65
    Size: 102.64 kB
  3. postgres-decoderbufs-1.9.7-1.Final.module+el9+1014+69379869.src.rpm
    MD5: edfb192fb66f9c8b74b819fd9296e287
    SHA-256: 00cb93938c1a32225e52c1ff14f816d51da0237faca77f3f586c6a9b71bd468d
    Size: 21.46 kB
  4. postgresql-15.3-1.module+el9+1014+69379869.src.rpm
    MD5: eaa69725378a754473024ee319f95f81
    SHA-256: 1f16be1c8fb5fee6ad67ee088c1b182fc1968d40904f8eeb1d413647dd289a55
    Size: 50.12 MB

Asianux Server 9 for x86_64
  1. pgaudit-1.7.0-1.module+el9+1014+69379869.x86_64.rpm
    MD5: fd69973c9ae7232d097c395a9bca2005
    SHA-256: cc2244fece626a1cca4dc56ed0c27b3cdae0e2d9cb303beeda1415e3194dc07e
    Size: 27.51 kB
  2. pgaudit-debugsource-1.7.0-1.module+el9+1014+69379869.x86_64.rpm
    MD5: d792cbdad8acad3412e9e08e4e39be50
    SHA-256: ebc8a145bafe87c822e23d8dc87051b52e95d1e35b8c94d5b45a0b722ff36c63
    Size: 22.29 kB
  3. pg_repack-1.4.8-1.module+el9+1014+69379869.x86_64.rpm
    MD5: f32ebe76e67651fe58e8b8c2aa50e5c3
    SHA-256: 4decd92ceb4e4e81efeb5f8c9f4f2c342733b72e796330b73e4362ad69a032d5
    Size: 90.29 kB
  4. pg_repack-debugsource-1.4.8-1.module+el9+1014+69379869.x86_64.rpm
    MD5: 53c03116caf55bd6e029735cc85868ac
    SHA-256: dd4324b1d07922d76de27f0af056536b4ff2f84dc2d9217a4249eb8d9fdbdc08
    Size: 48.52 kB
  5. postgres-decoderbufs-1.9.7-1.Final.module+el9+1014+69379869.x86_64.rpm
    MD5: d1b525b11385e905b6037086e604c21f
    SHA-256: 0d9a04cc382de3815b998cb1c13243f52dac28cdbec6d6f00dde6adc2c6019e6
    Size: 22.78 kB
  6. postgres-decoderbufs-debugsource-1.9.7-1.Final.module+el9+1014+69379869.x86_64.rpm
    MD5: 6c917b15b08c447492535bced1fd29e0
    SHA-256: 3f5d66c46bc15f1a3277dfc5fc0a6e149e2bc02b8b4d193726a5dfd0e0621aad
    Size: 16.55 kB
  7. postgresql-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: e95cc3e25cd6878d540089739d602c42
    SHA-256: 51a0d052694405b66f6caff12ba8e1b6b283a85c2f0fd5a714b7cb0915ea849c
    Size: 1.63 MB
  8. postgresql-contrib-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: 924ec87c7dc94b4a331df485bf62d0e8
    SHA-256: 60c166f2f59c0e912f2b464e7c5566dfe546034de87fec4a66f89ddb50849404
    Size: 906.73 kB
  9. postgresql-debugsource-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: df079081ccdc5ec5d95933cc4002bc95
    SHA-256: ab32932f0c1cb98c566ccb533235abeb1617d6b9e2f0df21812769216294b8e4
    Size: 15.22 MB
  10. postgresql-docs-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: ad9192067e5f1d970b000f2d0364fe43
    SHA-256: aa8f6bf0ad52798f2d4a6d9d8490aff9216aaa2c26fceb9c344ff0fc543a16a2
    Size: 9.58 MB
  11. postgresql-plperl-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: b47f3411980b6642472076c09b015d45
    SHA-256: b79b5506d79079be6348933e5fa4c4c2cfc1121c4318b20de8fe82aa7cb20810
    Size: 70.19 kB
  12. postgresql-plpython3-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: 7fb7ed7bb7d6a6a5bd71d33f139083d3
    SHA-256: 88b38fc386b51bdde83df5d3a082b9b498c5a93ec3d9cf60c6b4a41fd2ed94db
    Size: 94.29 kB
  13. postgresql-pltcl-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: bc0b781981838483c079feeb7e489fd6
    SHA-256: a3ae038908d80a1d32e54a2725e5945c5b7d4b1d171760f201f4d5f32a05cbe3
    Size: 45.00 kB
  14. postgresql-private-devel-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: 34391709e18fda38b5a786401f5b2deb
    SHA-256: 70af5cacc2319ba10956c17d88bbcbfa820b20a19c56abb250cbdab09c9c1cd0
    Size: 61.32 kB
  15. postgresql-private-libs-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: 8a72ee1d8e053ad033ec9722df6040f1
    SHA-256: b85aee17eba55c2e15f17ae81c20ba4e09be8513c0be951f741873261ec25034
    Size: 137.03 kB
  16. postgresql-server-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: e6a5089d1ae0986d898d3378ebcbe85d
    SHA-256: fcc74ad4e25497793d3f4ae346a489e66070c91631a61b6fd1fe701d7bf2fc10
    Size: 6.07 MB
  17. postgresql-server-devel-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: d557b010a524d670b9fbb460399f5b53
    SHA-256: a011ba6054b34485b9752143bd3ee6963c604d178439dad33e264f4dfdc3f317
    Size: 1.24 MB
  18. postgresql-static-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: 50cf5b2ce2f959310367aad82b143c0e
    SHA-256: 6a0e7ce50239df24b1d35b6393fcfd50fcdc66a87ced09803585da88c48a2c50
    Size: 150.26 kB
  19. postgresql-test-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: f377aee5d59dab79234b7921ab16ace1
    SHA-256: 0c37acb55699893e0ca2ccb768bb5f33dc701d010f412b2dda531deaedd89b99
    Size: 1.56 MB
  20. postgresql-test-rpm-macros-15.3-1.module+el9+1014+69379869.noarch.rpm
    MD5: b06f1426b6a9678239e6fa6d964a4276
    SHA-256: 72a04d8709a574c3ef58b5a2a7759bab238d512e3bc25bec5a7d7bac4ea21899
    Size: 9.19 kB
  21. postgresql-upgrade-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: 529b3d88f9c402197202820df28c5c66
    SHA-256: fc05caf91dc821e9f6a0775e6fde34af3314fd551d6d73b32370e06fd2cae8df
    Size: 4.72 MB
  22. postgresql-upgrade-devel-15.3-1.module+el9+1014+69379869.x86_64.rpm
    MD5: 23feeaa73115792a505769ce055f02bf
    SHA-256: acd33aad2b50dbdcecb439c770178fe04b666d31efb65099d80deb5dbb93390d
    Size: 1.04 MB