SUSE: 2023:2720-1 suse/postgres Security Update
Summary
Advisory ID: SUSE-SU-2023:3325-1 Released: Wed Aug 16 08:26:08 2023 Summary: Security update for krb5 Type: security Severity: important Advisory ID: SUSE-SU-2023:3347-1 Released: Thu Aug 17 14:39:10 2023 Summary: Security update for postgresql15 Type: security Severity: moderate
References
References : 1214054 1214059 1214061 CVE-2023-36054 CVE-2023-39417 CVE-2023-39418
1214054,CVE-2023-36054
This update for krb5 fixes the following issues:
- CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054)
1214059,1214061,CVE-2023-39417,CVE-2023-39418
This update for postgresql15 fixes the following issues:
- Update to 15.4
- CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059)
- CVE-2023-39418: Fix MERGE to enforce row security. (bsc#1214061)
The following package changes have been done:
- krb5-1.20.1-150500.3.3.1 updated
- libpq5-15.4-150200.5.12.1 updated
- postgresql15-15.4-150200.5.12.1 updated
- postgresql15-server-15.4-150200.5.12.1 updated
- container:sles15-image-15.0.0-36.5.25 updated