Summary
This update for postgresql, postgresql10, postgresql12 fixes the following issues:
Changes in the postgresql wrapper package:
- Sync ownership of /run/postgresql in the file list with tmpfiles.
- Use the correct content for .bash_profile (bsc#1153168).
- Stop shipping SUSEfirewall2 config files (bsc#1151591).
- Use /run/postgresql instead of /var/run/postgresql in %ghost and
postgresql-tmpfiles.conf to avoid rpmlint warnings and errors.
- add /var/run/postgresql to the filelist. as %ghost for systemd
systems and directly for non systemd systems
Changes in postgresql10:
- packaging changed to no longer build the libraries,
these now come from postgresql12.
Changes in postgresql12:
Initial package for the postgresql 12 branch
https://www.postgresql.org/about/news/1976/
- Update to 12.2 (CVE-2020-1720)
https://www.postgresql.org/about/news/2011/
https://www.postgresql.org/docs/12/release-12-2.html
- Avoid the dependency from the devel package to the main package.
devel packages are exclusive, thus ecpg does not require
update-alternatives.
- Remove unused build dependencies from the client libs package:
LVM, icu, selinux, systemd.
- Update to 12.1
https://www.postgresql.org/docs/12/release-12-1.html
https://www.postgresql.org/about/news/1994/
- add requires to the server-devel package for the libs that are
returned by pg_config --libs
python-psycopg2 was updated to 2.8.4 to allow working with postgresql12.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 | postgresql | 12-8.11.3 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 | postgresql10 | 10.12-8.13.9 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 | postgresql12 | 12.2-3.5.2 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 | postgresql12-libs | 12.2-3.5.2 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 | python-psycopg2 | 2.8.4-5.4.6 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Server Applications 15 SP1 | postgresql | 12-8.11.3 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Server Applications 15 SP1 | postgresql10 | 10.12-8.13.9 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Server Applications 15 SP1 | postgresql12 | 12.2-3.5.2 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Server Applications 15 SP1 | postgresql12-libs | 12.2-3.5.2 |
Vulnerabilities 2
-
High 7.5
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any…
-
Low 3.1
A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization che…
References
-
report
https://bugzilla.suse.com/1138034
-
report
https://bugzilla.suse.com/1151591
-
report
https://bugzilla.suse.com/1153168
-
report
https://bugzilla.suse.com/1163985
-
report
https://bugzilla.suse.com/1167541
-
web
https://www.suse.com/security/cve/CVE-2019-10164
-
web
https://www.suse.com/security/cve/CVE-2020-1720