Уведомление безопасности SUSE-SU-2018:3377-1

Высокая (6.0)

(AV:N/AC:M/Au:S/C:P/I:P/A:P)

SUSE

postgresql96 (any) postgresql96-contrib (any) postgresql96-contrib-debuginfo (any) postgresql96-debuginfo (any) postgresql96-debugsource (any) postgresql96-docs (any) postgresql96-libs-debugsource (any) postgresql96-server (any) postgresql96-server-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP3, SUSE OpenStack Cloud 7, SUSE Linux Enterprise Server 12-LTSS, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Desktop 12-SP3, SUSE Linux Enterprise Server 12-SP1-LTSS, SUSE Linux Enterprise Server for SAP 12-SP1, SUSE Linux Enterprise Server 12-SP3, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Enterprise Storage 4

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP3:
aarch64, ppc64le, s390x, x86_64:
postgresql96-libs-debugsource - 9.6.10-3.22.1
postgresql96-devel-debuginfo - 9.6.10-3.22.1
postgresql96-devel - 9.6.10-3.22.1
SUSE OpenStack Cloud 7:
s390x, x86_64:
postgresql96-server - 9.6.10-3.22.7
postgresql96-debuginfo - 9.6.10-3.22.7
postgresql96-server-debuginfo - 9.6.10-3.22.7
postgresql96-debugsource - 9.6.10-3.22.7
postgresql96-contrib-debuginfo - 9.6.10-3.22.7
postgresql96-contrib - 9.6.10-3.22.7
postgresql96 - 9.6.10-3.22.7
postgresql96-libs-debugsource - 9.6.10-3.22.1
SUSE OpenStack Cloud 7:
noarch:
postgresql96-docs - 9.6.10-3.22.7
SUSE Linux Enterprise Server 12-LTSS:
ppc64le, s390x, x86_64:
postgresql96-server - 9.6.10-3.22.7
postgresql96-debuginfo - 9.6.10-3.22.7
postgresql96-server-debuginfo - 9.6.10-3.22.7
postgresql96-debugsource - 9.6.10-3.22.7
postgresql96-contrib-debuginfo - 9.6.10-3.22.7
postgresql96-contrib - 9.6.10-3.22.7
postgresql96 - 9.6.10-3.22.7
SUSE Linux Enterprise Server 12-LTSS:
s390x:
postgresql96-libs-debugsource - 9.6.10-3.22.1
SUSE Linux Enterprise Server 12-LTSS:
noarch:
postgresql96-docs - 9.6.10-3.22.7
SUSE Linux Enterprise Server 12-SP2-LTSS:
ppc64le, s390x, x86_64:
postgresql96-server - 9.6.10-3.22.7
postgresql96-debuginfo - 9.6.10-3.22.7
postgresql96-server-debuginfo - 9.6.10-3.22.7
postgresql96-debugsource - 9.6.10-3.22.7
postgresql96-contrib-debuginfo - 9.6.10-3.22.7
postgresql96-contrib - 9.6.10-3.22.7
postgresql96 - 9.6.10-3.22.7
postgresql96-libs-debugsource - 9.6.10-3.22.1
SUSE Linux Enterprise Server 12-SP2-LTSS:
noarch:
postgresql96-docs - 9.6.10-3.22.7
SUSE Linux Enterprise Desktop 12-SP3:
x86_64:
postgresql96-debuginfo - 9.6.10-3.22.7
postgresql96 - 9.6.10-3.22.7
postgresql96-debugsource - 9.6.10-3.22.7
postgresql96-libs-debugsource - 9.6.10-3.22.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
ppc64le, s390x, x86_64:
postgresql96-server - 9.6.10-3.22.7
postgresql96-debuginfo - 9.6.10-3.22.7
postgresql96-server-debuginfo - 9.6.10-3.22.7
postgresql96-debugsource - 9.6.10-3.22.7
postgresql96-contrib-debuginfo - 9.6.10-3.22.7
postgresql96-contrib - 9.6.10-3.22.7
postgresql96 - 9.6.10-3.22.7
postgresql96-libs-debugsource - 9.6.10-3.22.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
noarch:
postgresql96-docs - 9.6.10-3.22.7
SUSE Linux Enterprise Server for SAP 12-SP1:
ppc64le, x86_64:
postgresql96-server - 9.6.10-3.22.7
postgresql96-debuginfo - 9.6.10-3.22.7
postgresql96-server-debuginfo - 9.6.10-3.22.7
postgresql96-debugsource - 9.6.10-3.22.7
postgresql96-contrib-debuginfo - 9.6.10-3.22.7
postgresql96-contrib - 9.6.10-3.22.7
postgresql96 - 9.6.10-3.22.7
postgresql96-libs-debugsource - 9.6.10-3.22.1
SUSE Linux Enterprise Server for SAP 12-SP1:
noarch:
postgresql96-docs - 9.6.10-3.22.7
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
postgresql96-server - 9.6.10-3.22.7
postgresql96-debuginfo - 9.6.10-3.22.7
postgresql96-server-debuginfo - 9.6.10-3.22.7
postgresql96-debugsource - 9.6.10-3.22.7
postgresql96-contrib-debuginfo - 9.6.10-3.22.7
postgresql96-contrib - 9.6.10-3.22.7
postgresql96 - 9.6.10-3.22.7
postgresql96-libs-debugsource - 9.6.10-3.22.1
SUSE Linux Enterprise Server 12-SP3:
noarch:
postgresql96-docs - 9.6.10-3.22.7
SUSE Linux Enterprise Server for SAP 12-SP2:
ppc64le, x86_64:
postgresql96-server - 9.6.10-3.22.7
postgresql96-debuginfo - 9.6.10-3.22.7
postgresql96-server-debuginfo - 9.6.10-3.22.7
postgresql96-debugsource - 9.6.10-3.22.7
postgresql96-contrib-debuginfo - 9.6.10-3.22.7
postgresql96-contrib - 9.6.10-3.22.7
postgresql96 - 9.6.10-3.22.7
postgresql96-libs-debugsource - 9.6.10-3.22.1
SUSE Linux Enterprise Server for SAP 12-SP2:
noarch:
postgresql96-docs - 9.6.10-3.22.7
SUSE Enterprise Storage 4:
x86_64:
postgresql96-server - 9.6.10-3.22.7
postgresql96-debuginfo - 9.6.10-3.22.7
postgresql96-server-debuginfo - 9.6.10-3.22.7
postgresql96-debugsource - 9.6.10-3.22.7
postgresql96-contrib-debuginfo - 9.6.10-3.22.7
postgresql96-contrib - 9.6.10-3.22.7
postgresql96 - 9.6.10-3.22.7
postgresql96-libs-debugsource - 9.6.10-3.22.1
SUSE Enterprise Storage 4:
noarch:
postgresql96-docs - 9.6.10-3.22.7

http://lists.suse.com/pipermail/sle-security-updates/2018-October/004778.html
https://bugzilla.suse.com/1104199
https://bugzilla.suse.com/1104202

Источник: CVE
Наименование: CVE-2018-10925
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10925

Источник: CVE
Наименование: CVE-2018-10915
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10915