{"id":"openSUSE-SU-2020:1228-1","summary":"Security update for postgresql, postgresql96, postgresql10, postgresql12","details":"This update for postgresql, postgresql96, postgresql10, postgresql12 fixes the following issues:\n\nPostgresql12 was updated to 12.3 (bsc#1171924).\n\n- https://www.postgresql.org/about/news/2038/\n- https://www.postgresql.org/docs/12/release-12-3.html\n\n- Let postgresqlXX conflict with postgresql-noarch \u003c 12.0.1 to get\n  a clean and complete cutover to the new packaging schema.\n\nAlso changed in the postgresql wrapper package:\n\n- Bump version to 12.0.1, so that the binary packages also have\n  a cut-point to conflict with.\n\n- Conflict with versions of the binary packages prior to the\n  May 2020 update, because we changed the package layout at that\n  point and need a clean cutover.\n\n- Bump package version to 12, but leave default at 10 for\n  SLE-15 and SLE-15-SP1.\n\npostgresql11 was updated to 11.9:\n\n\n* CVE-2020-14349, bsc#1175193: Set a secure search_path in\n  logical replication walsenders and apply workers\n* CVE-2020-14350, bsc#1175194: Make contrib modules' installation\n  scripts more secure.\n* https://www.postgresql.org/docs/11/release-11-9.html\n- Pack the /usr/lib/postgresql symlink only into the main package.\n\npostgresql11 was updated to 11.8 (bsc#1171924).\n\n*  https://www.postgresql.org/about/news/2038/\n*  https://www.postgresql.org/docs/11/release-11-8.html\n\n- Unify the spec file to work across all current PostgreSQL\n  versions to simplify future maintenance.\n- Move from the 'libs' build flavour to a 'mini' package that will\n  only be used inside the build service and not get shipped, to\n  avoid confusion with the debuginfo packages (bsc#1148643).\n\npostgresql10 was updated to 10.13 (bsc#1171924).\n\n- https://www.postgresql.org/about/news/2038/\n- https://www.postgresql.org/docs/10/release-10-13.html\n\n- Unify the spec file to work across all current PostgreSQL\n  versions to simplify future maintenance.\n- Move from the 'libs' build flavour to a 'mini' package that will\n  only be used inside the build service and not get shipped, to\n  avoid confusion with the debuginfo packages (bsc#1148643).\n\npostgresql96 was updated to 9.6.19:\n\n  * CVE-2020-14350, boo#1175194: Make contrib modules' installation\n    scripts more secure.\n  * https://www.postgresql.org/docs/9.6/release-9-6-19.html\n\n- Pack the /usr/lib/postgresql symlink only into the main package.\n\n- Let postgresqlXX conflict with postgresql-noarch \u003c 12.0.1 to get\n  a clean and complete cutover to the new packaging schema.\n\n- update to 9.6.18 (boo#1171924).\n  https://www.postgresql.org/about/news/2038/\n  https://www.postgresql.org/docs/9.6/release-9-6-18.html\n- Unify the spec file to work across all current PostgreSQL\n  versions to simplify future maintenance.\n- Move from the 'libs' build flavour to a 'mini' package that will\n  only be used inside the build service and not get shipped, to\n  avoid confusion with the debuginfo packages (boo#1148643).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","modified":"2026-03-11T07:32:38.346211Z","published":"2020-08-17T14:19:12Z","related":["CVE-2020-14349","CVE-2020-14350"],"upstream":["CVE-2020-14349","CVE-2020-14350"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RVKTSYB6VOWNCXMN2C6CHUQBVHCRICIH/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1148643"},{"type":"REPORT","url":"https://bugzilla.suse.com/1171924"},{"type":"REPORT","url":"https://bugzilla.suse.com/1175193"},{"type":"REPORT","url":"https://bugzilla.suse.com/1175194"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14349"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14350"}],"affected":[{"package":{"name":"postgresql","ecosystem":"openSUSE:Leap 15.2","purl":"pkg:rpm/opensuse/postgresql&distro=openSUSE%20Leap%2015.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.1-lp152.3.3.2"}]}],"ecosystem_specific":{"binaries":[{"postgresql12-pltcl":"12.3-lp152.3.4.1","postgresql12-server-devel":"12.3-lp152.3.4.1","postgresql96-contrib":"9.6.19-lp152.2.3.1","postgresql96-devel":"9.6.19-lp152.2.3.1","postgresql96-plpython":"9.6.19-lp152.2.3.1","postgresql96-pltcl":"9.6.19-lp152.2.3.1","postgresql96-server":"9.6.19-lp152.2.3.1","libecpg6-32bit":"12.3-lp152.3.4.1","postgresql-devel":"12.0.1-lp152.3.3.2","postgresql-llvmjit":"12.0.1-lp152.3.3.2","postgresql-plperl":"12.0.1-lp152.3.3.2","postgresql10-contrib":"10.13-lp152.2.3.1","postgresql11-contrib":"11.9-lp152.3.3.1","postgresql11":"11.9-lp152.3.3.1","postgresql12-contrib":"12.3-lp152.3.4.1","postgresql96-docs":"9.6.19-lp152.2.3.1","postgresql":"12.0.1-lp152.3.3.2","postgresql-server":"12.0.1-lp152.3.3.2","postgresql10-pltcl":"10.13-lp152.2.3.1","postgresql10-test":"10.13-lp152.2.3.1","postgresql10":"10.13-lp152.2.3.1","postgresql11-docs":"11.9-lp152.3.3.1","postgresql11-pltcl":"11.9-lp152.3.3.1","postgresql11-server":"11.9-lp152.3.3.1","postgresql12-devel":"12.3-lp152.3.4.1","postgresql-contrib":"12.0.1-lp152.3.3.2","postgresql-server-devel":"12.0.1-lp152.3.3.2","postgresql10-devel":"10.13-lp152.2.3.1","postgresql11-devel":"11.9-lp152.3.3.1","postgresql12-plperl":"12.3-lp152.3.4.1","postgresql12-plpython":"12.3-lp152.3.4.1","postgresql12-test":"12.3-lp152.3.4.1","libpq5-32bit":"12.3-lp152.3.4.1","libpq5":"12.3-lp152.3.4.1","postgresql-docs":"12.0.1-lp152.3.3.2","postgresql-plpython":"12.0.1-lp152.3.3.2","postgresql-pltcl":"12.0.1-lp152.3.3.2","postgresql-test":"12.0.1-lp152.3.3.2","postgresql10-plperl":"10.13-lp152.2.3.1","postgresql10-plpython":"10.13-lp152.2.3.1","postgresql11-plperl":"11.9-lp152.3.3.1","postgresql10-docs":"10.13-lp152.2.3.1","postgresql11-llvmjit":"11.9-lp152.3.3.1","postgresql12-docs":"12.3-lp152.3.4.1","postgresql12-llvmjit":"12.3-lp152.3.4.1","postgresql12":"12.3-lp152.3.4.1","postgresql96-plperl":"9.6.19-lp152.2.3.1","postgresql96-test":"9.6.19-lp152.2.3.1","libecpg6":"12.3-lp152.3.4.1","postgresql10-server":"10.13-lp152.2.3.1","postgresql11-plpython":"11.9-lp152.3.3.1","postgresql11-test":"11.9-lp152.3.3.1","postgresql12-server":"12.3-lp152.3.4.1","postgresql96":"9.6.19-lp152.2.3.1","postgresql11-server-devel":"11.9-lp152.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1228-1.json"}},{"package":{"name":"postgresql10","ecosystem":"openSUSE:Leap 15.2","purl":"pkg:rpm/opensuse/postgresql10&distro=openSUSE%20Leap%2015.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.13-lp152.2.3.1"}]}],"ecosystem_specific":{"binaries":[{"postgresql11-pltcl":"11.9-lp152.3.3.1","postgresql12-docs":"12.3-lp152.3.4.1","postgresql12-plpython":"12.3-lp152.3.4.1","postgresql96-plperl":"9.6.19-lp152.2.3.1","libecpg6":"12.3-lp152.3.4.1","postgresql-plperl":"12.0.1-lp152.3.3.2","postgresql-plpython":"12.0.1-lp152.3.3.2","postgresql-pltcl":"12.0.1-lp152.3.3.2","postgresql-server":"12.0.1-lp152.3.3.2","postgresql10-server":"10.13-lp152.2.3.1","postgresql11-devel":"11.9-lp152.3.3.1","postgresql11-llvmjit":"11.9-lp152.3.3.1","postgresql10-contrib":"10.13-lp152.2.3.1","postgresql10-pltcl":"10.13-lp152.2.3.1","postgresql11-plperl":"11.9-lp152.3.3.1","postgresql11-test":"11.9-lp152.3.3.1","postgresql12-plperl":"12.3-lp152.3.4.1","postgresql96-devel":"9.6.19-lp152.2.3.1","postgresql96-docs":"9.6.19-lp152.2.3.1","postgresql96-plpython":"9.6.19-lp152.2.3.1","postgresql10-docs":"10.13-lp152.2.3.1","postgresql10-plperl":"10.13-lp152.2.3.1","postgresql10-plpython":"10.13-lp152.2.3.1","postgresql11-server":"11.9-lp152.3.3.1","postgresql12-devel":"12.3-lp152.3.4.1","postgresql96-test":"9.6.19-lp152.2.3.1","libecpg6-32bit":"12.3-lp152.3.4.1","postgresql11-docs":"11.9-lp152.3.3.1","postgresql96-server":"9.6.19-lp152.2.3.1","libpq5":"12.3-lp152.3.4.1","postgresql-contrib":"12.0.1-lp152.3.3.2","postgresql11-server-devel":"11.9-lp152.3.3.1","postgresql11":"11.9-lp152.3.3.1","postgresql12-contrib":"12.3-lp152.3.4.1","postgresql12-pltcl":"12.3-lp152.3.4.1","postgresql96-pltcl":"9.6.19-lp152.2.3.1","postgresql":"12.0.1-lp152.3.3.2","postgresql-devel":"12.0.1-lp152.3.3.2","postgresql-docs":"12.0.1-lp152.3.3.2","postgresql-llvmjit":"12.0.1-lp152.3.3.2","postgresql10":"10.13-lp152.2.3.1","postgresql11-plpython":"11.9-lp152.3.3.1","postgresql12-server-devel":"12.3-lp152.3.4.1","postgresql12-server":"12.3-lp152.3.4.1","postgresql12":"12.3-lp152.3.4.1","postgresql-test":"12.0.1-lp152.3.3.2","postgresql10-devel":"10.13-lp152.2.3.1","postgresql10-test":"10.13-lp152.2.3.1","postgresql12-llvmjit":"12.3-lp152.3.4.1","postgresql12-test":"12.3-lp152.3.4.1","postgresql96-contrib":"9.6.19-lp152.2.3.1","postgresql96":"9.6.19-lp152.2.3.1","libpq5-32bit":"12.3-lp152.3.4.1","postgresql-server-devel":"12.0.1-lp152.3.3.2","postgresql11-contrib":"11.9-lp152.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1228-1.json"}},{"package":{"name":"postgresql11","ecosystem":"openSUSE:Leap 15.2","purl":"pkg:rpm/opensuse/postgresql11&distro=openSUSE%20Leap%2015.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.9-lp152.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"postgresql11-pltcl":"11.9-lp152.3.3.1","postgresql11-server-devel":"11.9-lp152.3.3.1","postgresql12-llvmjit":"12.3-lp152.3.4.1","postgresql12-server":"12.3-lp152.3.4.1","postgresql11-llvmjit":"11.9-lp152.3.3.1","postgresql-server":"12.0.1-lp152.3.3.2","libecpg6-32bit":"12.3-lp152.3.4.1","postgresql10-plpython":"10.13-lp152.2.3.1","postgresql10-test":"10.13-lp152.2.3.1","postgresql11-plpython":"11.9-lp152.3.3.1","postgresql12-plperl":"12.3-lp152.3.4.1","postgresql96-pltcl":"9.6.19-lp152.2.3.1","libpq5":"12.3-lp152.3.4.1","postgresql10-docs":"10.13-lp152.2.3.1","postgresql10-pltcl":"10.13-lp152.2.3.1","postgresql11-docs":"11.9-lp152.3.3.1","postgresql96-contrib":"9.6.19-lp152.2.3.1","postgresql96-docs":"9.6.19-lp152.2.3.1","postgresql96":"9.6.19-lp152.2.3.1","postgresql-devel":"12.0.1-lp152.3.3.2","postgresql-plperl":"12.0.1-lp152.3.3.2","postgresql-pltcl":"12.0.1-lp152.3.3.2","postgresql11-devel":"11.9-lp152.3.3.1","postgresql11-server":"11.9-lp152.3.3.1","postgresql96-devel":"9.6.19-lp152.2.3.1","postgresql96-server":"9.6.19-lp152.2.3.1","postgresql-contrib":"12.0.1-lp152.3.3.2","postgresql12-server-devel":"12.3-lp152.3.4.1","postgresql12-test":"12.3-lp152.3.4.1","postgresql96-plperl":"9.6.19-lp152.2.3.1","postgresql96-plpython":"9.6.19-lp152.2.3.1","postgresql96-test":"9.6.19-lp152.2.3.1","postgresql":"12.0.1-lp152.3.3.2","postgresql-docs":"12.0.1-lp152.3.3.2","postgresql-llvmjit":"12.0.1-lp152.3.3.2","postgresql10-devel":"10.13-lp152.2.3.1","postgresql10-plperl":"10.13-lp152.2.3.1","postgresql10-server":"10.13-lp152.2.3.1","postgresql11-test":"11.9-lp152.3.3.1","postgresql12-devel":"12.3-lp152.3.4.1","postgresql11-plperl":"11.9-lp152.3.3.1","libecpg6":"12.3-lp152.3.4.1","postgresql-server-devel":"12.0.1-lp152.3.3.2","postgresql-test":"12.0.1-lp152.3.3.2","postgresql12-contrib":"12.3-lp152.3.4.1","postgresql12":"12.3-lp152.3.4.1","libpq5-32bit":"12.3-lp152.3.4.1","postgresql-plpython":"12.0.1-lp152.3.3.2","postgresql10":"10.13-lp152.2.3.1","postgresql11-contrib":"11.9-lp152.3.3.1","postgresql11":"11.9-lp152.3.3.1","postgresql12-docs":"12.3-lp152.3.4.1","postgresql12-plpython":"12.3-lp152.3.4.1","postgresql12-pltcl":"12.3-lp152.3.4.1","postgresql10-contrib":"10.13-lp152.2.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1228-1.json"}},{"package":{"name":"postgresql12","ecosystem":"openSUSE:Leap 15.2","purl":"pkg:rpm/opensuse/postgresql12&distro=openSUSE%20Leap%2015.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3-lp152.3.4.1"}]}],"ecosystem_specific":{"binaries":[{"postgresql96-docs":"9.6.19-lp152.2.3.1","postgresql96":"9.6.19-lp152.2.3.1","libecpg6-32bit":"12.3-lp152.3.4.1","postgresql-devel":"12.0.1-lp152.3.3.2","postgresql11-contrib":"11.9-lp152.3.3.1","postgresql12-contrib":"12.3-lp152.3.4.1","postgresql96-plpython":"9.6.19-lp152.2.3.1","postgresql96-server":"9.6.19-lp152.2.3.1","postgresql-pltcl":"12.0.1-lp152.3.3.2","postgresql-test":"12.0.1-lp152.3.3.2","postgresql10-test":"10.13-lp152.2.3.1","postgresql11-llvmjit":"11.9-lp152.3.3.1","postgresql11-server":"11.9-lp152.3.3.1","postgresql12":"12.3-lp152.3.4.1","postgresql96-pltcl":"9.6.19-lp152.2.3.1","postgresql96-test":"9.6.19-lp152.2.3.1","postgresql11-docs":"11.9-lp152.3.3.1","postgresql-server":"12.0.1-lp152.3.3.2","postgresql-contrib":"12.0.1-lp152.3.3.2","postgresql-docs":"12.0.1-lp152.3.3.2","postgresql-server-devel":"12.0.1-lp152.3.3.2","postgresql10-contrib":"10.13-lp152.2.3.1","postgresql11-pltcl":"11.9-lp152.3.3.1","postgresql11-test":"11.9-lp152.3.3.1","postgresql-plperl":"12.0.1-lp152.3.3.2","postgresql10-plpython":"10.13-lp152.2.3.1","postgresql10-server":"10.13-lp152.2.3.1","postgresql11-plperl":"11.9-lp152.3.3.1","postgresql12-plpython":"12.3-lp152.3.4.1","postgresql12-server-devel":"12.3-lp152.3.4.1","postgresql96-contrib":"9.6.19-lp152.2.3.1","postgresql96-devel":"9.6.19-lp152.2.3.1","libpq5-32bit":"12.3-lp152.3.4.1","postgresql11-plpython":"11.9-lp152.3.3.1","postgresql12-devel":"12.3-lp152.3.4.1","postgresql12-llvmjit":"12.3-lp152.3.4.1","postgresql12-pltcl":"12.3-lp152.3.4.1","postgresql-llvmjit":"12.0.1-lp152.3.3.2","postgresql10-pltcl":"10.13-lp152.2.3.1","postgresql10":"10.13-lp152.2.3.1","postgresql11-devel":"11.9-lp152.3.3.1","postgresql12-docs":"12.3-lp152.3.4.1","postgresql12-server":"12.3-lp152.3.4.1","postgresql96-plperl":"9.6.19-lp152.2.3.1","postgresql":"12.0.1-lp152.3.3.2","libecpg6":"12.3-lp152.3.4.1","libpq5":"12.3-lp152.3.4.1","postgresql10-docs":"10.13-lp152.2.3.1","postgresql12-plperl":"12.3-lp152.3.4.1","postgresql12-test":"12.3-lp152.3.4.1","postgresql-plpython":"12.0.1-lp152.3.3.2","postgresql10-devel":"10.13-lp152.2.3.1","postgresql10-plperl":"10.13-lp152.2.3.1","postgresql11-server-devel":"11.9-lp152.3.3.1","postgresql11":"11.9-lp152.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1228-1.json"}},{"package":{"name":"postgresql96","ecosystem":"openSUSE:Leap 15.2","purl":"pkg:rpm/opensuse/postgresql96&distro=openSUSE%20Leap%2015.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.19-lp152.2.3.1"}]}],"ecosystem_specific":{"binaries":[{"postgresql-plperl":"12.0.1-lp152.3.3.2","postgresql10-contrib":"10.13-lp152.2.3.1","postgresql10-server":"10.13-lp152.2.3.1","postgresql11-docs":"11.9-lp152.3.3.1","postgresql12-devel":"12.3-lp152.3.4.1","postgresql-server":"12.0.1-lp152.3.3.2","postgresql-test":"12.0.1-lp152.3.3.2","postgresql11-server":"11.9-lp152.3.3.1","postgresql12-server":"12.3-lp152.3.4.1","postgresql12":"12.3-lp152.3.4.1","postgresql96-devel":"9.6.19-lp152.2.3.1","postgresql96-pltcl":"9.6.19-lp152.2.3.1","libpq5":"12.3-lp152.3.4.1","postgresql11-pltcl":"11.9-lp152.3.3.1","postgresql11-server-devel":"11.9-lp152.3.3.1","postgresql11":"11.9-lp152.3.3.1","postgresql96-contrib":"9.6.19-lp152.2.3.1","postgresql96-plpython":"9.6.19-lp152.2.3.1","libpq5-32bit":"12.3-lp152.3.4.1","postgresql10-devel":"10.13-lp152.2.3.1","postgresql10-docs":"10.13-lp152.2.3.1","postgresql10-test":"10.13-lp152.2.3.1","postgresql11-test":"11.9-lp152.3.3.1","postgresql":"12.0.1-lp152.3.3.2","postgresql-llvmjit":"12.0.1-lp152.3.3.2","postgresql-server-devel":"12.0.1-lp152.3.3.2","postgresql12-contrib":"12.3-lp152.3.4.1","postgresql12-docs":"12.3-lp152.3.4.1","postgresql12-llvmjit":"12.3-lp152.3.4.1","postgresql12-plpython":"12.3-lp152.3.4.1","postgresql12-server-devel":"12.3-lp152.3.4.1","postgresql96-test":"9.6.19-lp152.2.3.1","postgresql-contrib":"12.0.1-lp152.3.3.2","postgresql-plpython":"12.0.1-lp152.3.3.2","postgresql-pltcl":"12.0.1-lp152.3.3.2","postgresql10-pltcl":"10.13-lp152.2.3.1","postgresql10":"10.13-lp152.2.3.1","postgresql11-plperl":"11.9-lp152.3.3.1","postgresql11-plpython":"11.9-lp152.3.3.1","postgresql12-test":"12.3-lp152.3.4.1","libecpg6":"12.3-lp152.3.4.1","postgresql10-plperl":"10.13-lp152.2.3.1","postgresql10-plpython":"10.13-lp152.2.3.1","postgresql11-devel":"11.9-lp152.3.3.1","postgresql12-plperl":"12.3-lp152.3.4.1","postgresql96-docs":"9.6.19-lp152.2.3.1","postgresql96-plperl":"9.6.19-lp152.2.3.1","postgresql11-contrib":"11.9-lp152.3.3.1","postgresql11-llvmjit":"11.9-lp152.3.3.1","postgresql12-pltcl":"12.3-lp152.3.4.1","postgresql96-server":"9.6.19-lp152.2.3.1","postgresql96":"9.6.19-lp152.2.3.1","libecpg6-32bit":"12.3-lp152.3.4.1","postgresql-devel":"12.0.1-lp152.3.3.2","postgresql-docs":"12.0.1-lp152.3.3.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1228-1.json"}}],"schema_version":"1.7.5"}