SUSE-SU-2020:2265-1

update to 12.4:
- CVE-2020-14349, bsc#1175193: Set a secure search_path in logical replication walsenders and apply workers
- CVE-2020-14350, bsc#1175194: Make contrib modules' installation scripts more secure.
- https://www.postgresql.org/docs/12/release-12-4.html

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP2

postgresql12

Package

Name: postgresql12
Purl: pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

12.4-8.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "libpq5":  "12.4-8.6.1",
            "libpq5-32bit":  "12.4-8.6.1",
            "postgresql12":  "12.4-8.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2265-1.json"

SUSE:Linux Enterprise Module for Server Applications 15 SP2

postgresql12

Package

Name: postgresql12
Purl: pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

12.4-8.6.1

Ecosystem specific

{
    "binaries":  [
        {
            "libecpg6":  "12.4-8.6.1",
            "postgresql12-contrib":  "12.4-8.6.1",
            "postgresql12-devel":  "12.4-8.6.1",
            "postgresql12-docs":  "12.4-8.6.1",
            "postgresql12-plperl":  "12.4-8.6.1",
            "postgresql12-plpython":  "12.4-8.6.1",
            "postgresql12-pltcl":  "12.4-8.6.1",
            "postgresql12-server":  "12.4-8.6.1",
            "postgresql12-server-devel":  "12.4-8.6.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2265-1.json"