SUSE-RU-2020:1280-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2020:1280-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-RU-2020:1280-1
Related
Published
2020-05-14T12:28:08Z
Modified
2020-05-14T12:28:08Z
Summary
Recommended update for postgresql, postgresql10, postgresql12
Details

This update for postgresql, postgresql10, postgresql12 fixes the following issues:

Changes in the postgresql wrapper package:

  • Sync ownership of /run/postgresql in the file list with tmpfiles.
  • Use the correct content for .bash_profile (bsc#1153168).
  • Stop shipping SUSEfirewall2 config files (bsc#1151591).
  • Use /run/postgresql instead of /var/run/postgresql in %ghost and postgresql-tmpfiles.conf to avoid rpmlint warnings and errors.
  • add /var/run/postgresql to the filelist. as %ghost for systemd systems and directly for non systemd systems

Changes in postgresql10:

  • packaging changed to no longer build the libraries, these now come from postgresql12.

Changes in postgresql12:

Initial package for the postgresql 12 branch

https://www.postgresql.org/about/news/1976/

  • Update to 12.2 (CVE-2020-1720) https://www.postgresql.org/about/news/2011/ https://www.postgresql.org/docs/12/release-12-2.html

  • Avoid the dependency from the devel package to the main package. devel packages are exclusive, thus ecpg does not require update-alternatives.

  • Remove unused build dependencies from the client libs package: LVM, icu, selinux, systemd.

  • Update to 12.1

    https://www.postgresql.org/docs/12/release-12-1.html https://www.postgresql.org/about/news/1994/

  • add requires to the server-devel package for the libs that are returned by pg_config --libs

python-psycopg2 was updated to 2.8.4 to allow working with postgresql12.

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP1 / postgresql

Package

Name
postgresql
Purl
purl:rpm/suse/postgresql&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
12-8.11.3

Ecosystem specific

{
    "binaries": [
        {
            "libpq5": "12.2-3.5.2",
            "postgresql": "12-8.11.3",
            "python3-psycopg2": "2.8.4-5.4.6",
            "postgresql10": "10.12-8.13.10",
            "postgresql12": "12.2-3.5.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP1 / postgresql10

Package

Name
postgresql10
Purl
purl:rpm/suse/postgresql10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.12-8.13.9

Ecosystem specific

{
    "binaries": [
        {
            "libpq5": "12.2-3.5.2",
            "postgresql": "12-8.11.3",
            "python3-psycopg2": "2.8.4-5.4.6",
            "postgresql10": "10.12-8.13.10",
            "postgresql12": "12.2-3.5.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP1 / postgresql12

Package

Name
postgresql12
Purl
purl:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
12.2-3.5.2

Ecosystem specific

{
    "binaries": [
        {
            "libpq5": "12.2-3.5.2",
            "postgresql": "12-8.11.3",
            "python3-psycopg2": "2.8.4-5.4.6",
            "postgresql10": "10.12-8.13.10",
            "postgresql12": "12.2-3.5.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP1 / postgresql12-libs

Package

Name
postgresql12-libs
Purl
purl:rpm/suse/postgresql12-libs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
12.2-3.5.2

Ecosystem specific

{
    "binaries": [
        {
            "libpq5": "12.2-3.5.2",
            "postgresql": "12-8.11.3",
            "python3-psycopg2": "2.8.4-5.4.6",
            "postgresql10": "10.12-8.13.10",
            "postgresql12": "12.2-3.5.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP1 / python-psycopg2

Package

Name
python-psycopg2
Purl
purl:rpm/suse/python-psycopg2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.8.4-5.4.6

Ecosystem specific

{
    "binaries": [
        {
            "libpq5": "12.2-3.5.2",
            "postgresql": "12-8.11.3",
            "python3-psycopg2": "2.8.4-5.4.6",
            "postgresql10": "10.12-8.13.10",
            "postgresql12": "12.2-3.5.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Server Applications 15 SP1 / postgresql

Package

Name
postgresql
Purl
purl:rpm/suse/postgresql&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
12-8.11.3

Ecosystem specific

{
    "binaries": [
        {
            "postgresql10-docs": "10.12-8.13.10",
            "postgresql12-docs": "12.2-3.5.2",
            "postgresql-plperl": "12-8.11.3",
            "libecpg6": "12.2-3.5.2",
            "postgresql10-contrib": "10.12-8.13.10",
            "postgresql12-plperl": "12.2-3.5.2",
            "postgresql12-plpython": "12.2-3.5.2",
            "postgresql12-contrib": "12.2-3.5.2",
            "postgresql-devel": "12-8.11.3",
            "postgresql-pltcl": "12-8.11.3",
            "postgresql10-plperl": "10.12-8.13.10",
            "postgresql12-devel": "12.2-3.5.2",
            "postgresql10-devel": "10.12-8.13.9",
            "postgresql-docs": "12-8.11.3",
            "postgresql10-pltcl": "10.12-8.13.10",
            "postgresql-plpython": "12-8.11.3",
            "postgresql10-server": "10.12-8.13.10",
            "postgresql12-pltcl": "12.2-3.5.2",
            "postgresql12-server": "12.2-3.5.2",
            "postgresql-contrib": "12-8.11.3",
            "postgresql-server-devel": "12-8.11.3",
            "postgresql-server": "12-8.11.3",
            "postgresql10-plpython": "10.12-8.13.10",
            "postgresql12-server-devel": "12.2-3.5.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Server Applications 15 SP1 / postgresql10

Package

Name
postgresql10
Purl
purl:rpm/suse/postgresql10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.12-8.13.9

Ecosystem specific

{
    "binaries": [
        {
            "postgresql10-docs": "10.12-8.13.10",
            "postgresql12-docs": "12.2-3.5.2",
            "postgresql-plperl": "12-8.11.3",
            "libecpg6": "12.2-3.5.2",
            "postgresql10-contrib": "10.12-8.13.10",
            "postgresql12-plperl": "12.2-3.5.2",
            "postgresql12-plpython": "12.2-3.5.2",
            "postgresql12-contrib": "12.2-3.5.2",
            "postgresql-devel": "12-8.11.3",
            "postgresql-pltcl": "12-8.11.3",
            "postgresql10-plperl": "10.12-8.13.10",
            "postgresql12-devel": "12.2-3.5.2",
            "postgresql10-devel": "10.12-8.13.9",
            "postgresql-docs": "12-8.11.3",
            "postgresql10-pltcl": "10.12-8.13.10",
            "postgresql-plpython": "12-8.11.3",
            "postgresql10-server": "10.12-8.13.10",
            "postgresql12-pltcl": "12.2-3.5.2",
            "postgresql12-server": "12.2-3.5.2",
            "postgresql-contrib": "12-8.11.3",
            "postgresql-server-devel": "12-8.11.3",
            "postgresql-server": "12-8.11.3",
            "postgresql10-plpython": "10.12-8.13.10",
            "postgresql12-server-devel": "12.2-3.5.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Server Applications 15 SP1 / postgresql12

Package

Name
postgresql12
Purl
purl:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
12.2-3.5.2

Ecosystem specific

{
    "binaries": [
        {
            "postgresql10-docs": "10.12-8.13.10",
            "postgresql12-docs": "12.2-3.5.2",
            "postgresql-plperl": "12-8.11.3",
            "libecpg6": "12.2-3.5.2",
            "postgresql10-contrib": "10.12-8.13.10",
            "postgresql12-plperl": "12.2-3.5.2",
            "postgresql12-plpython": "12.2-3.5.2",
            "postgresql12-contrib": "12.2-3.5.2",
            "postgresql-devel": "12-8.11.3",
            "postgresql-pltcl": "12-8.11.3",
            "postgresql10-plperl": "10.12-8.13.10",
            "postgresql12-devel": "12.2-3.5.2",
            "postgresql10-devel": "10.12-8.13.9",
            "postgresql-docs": "12-8.11.3",
            "postgresql10-pltcl": "10.12-8.13.10",
            "postgresql-plpython": "12-8.11.3",
            "postgresql10-server": "10.12-8.13.10",
            "postgresql12-pltcl": "12.2-3.5.2",
            "postgresql12-server": "12.2-3.5.2",
            "postgresql-contrib": "12-8.11.3",
            "postgresql-server-devel": "12-8.11.3",
            "postgresql-server": "12-8.11.3",
            "postgresql10-plpython": "10.12-8.13.10",
            "postgresql12-server-devel": "12.2-3.5.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Server Applications 15 SP1 / postgresql12-libs

Package

Name
postgresql12-libs
Purl
purl:rpm/suse/postgresql12-libs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
12.2-3.5.2

Ecosystem specific

{
    "binaries": [
        {
            "postgresql10-docs": "10.12-8.13.10",
            "postgresql12-docs": "12.2-3.5.2",
            "postgresql-plperl": "12-8.11.3",
            "libecpg6": "12.2-3.5.2",
            "postgresql10-contrib": "10.12-8.13.10",
            "postgresql12-plperl": "12.2-3.5.2",
            "postgresql12-plpython": "12.2-3.5.2",
            "postgresql12-contrib": "12.2-3.5.2",
            "postgresql-devel": "12-8.11.3",
            "postgresql-pltcl": "12-8.11.3",
            "postgresql10-plperl": "10.12-8.13.10",
            "postgresql12-devel": "12.2-3.5.2",
            "postgresql10-devel": "10.12-8.13.9",
            "postgresql-docs": "12-8.11.3",
            "postgresql10-pltcl": "10.12-8.13.10",
            "postgresql-plpython": "12-8.11.3",
            "postgresql10-server": "10.12-8.13.10",
            "postgresql12-pltcl": "12.2-3.5.2",
            "postgresql12-server": "12.2-3.5.2",
            "postgresql-contrib": "12-8.11.3",
            "postgresql-server-devel": "12-8.11.3",
            "postgresql-server": "12-8.11.3",
            "postgresql10-plpython": "10.12-8.13.10",
            "postgresql12-server-devel": "12.2-3.5.2"
        }
    ]
}