SUSE-RU-2020:1280-1: moderate: Recommended update for postgresql, postgresql10, postgresql12
sle-updates at lists.suse.com
sle-updates at lists.suse.com
Thu May 14 10:25:19 MDT 2020
SUSE Recommended Update: Recommended update for postgresql, postgresql10, postgresql12
______________________________________________________________________________
Announcement ID: SUSE-RU-2020:1280-1
Rating: moderate
References: #1138034 #1151591 #1153168 #1163985 #1167541
Affected Products:
SUSE Linux Enterprise Module for Server Applications 15-SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
SUSE Linux Enterprise Module for Basesystem 15-SP1
______________________________________________________________________________
An update that solves two vulnerabilities and has three
fixes is now available.
Description:
This update for postgresql, postgresql10, postgresql12 fixes the following
issues:
Changes in the postgresql wrapper package:
- Sync ownership of /run/postgresql in the file list with tmpfiles.
- Use the correct content for .bash_profile (bsc#1153168).
- Stop shipping SUSEfirewall2 config files (bsc#1151591).
- Use /run/postgresql instead of /var/run/postgresql in %ghost and
postgresql-tmpfiles.conf to avoid rpmlint warnings and errors.
- add /var/run/postgresql to the filelist. as %ghost for systemd systems
and directly for non systemd systems
Changes in postgresql10:
- packaging changed to no longer build the libraries, these now come from
postgresql12.
Changes in postgresql12:
Initial package for the postgresql 12 branch
https://www.postgresql.org/about/news/1976/
- Update to 12.2 (CVE-2020-1720)
https://www.postgresql.org/about/news/2011/
https://www.postgresql.org/docs/12/release-12-2.html
- Avoid the dependency from the devel package to the main package. devel
packages are exclusive, thus ecpg does not require update-alternatives.
- Remove unused build dependencies from the client libs package: LVM, icu,
selinux, systemd.
- Update to 12.1
https://www.postgresql.org/docs/12/release-12-1.html
https://www.postgresql.org/about/news/1994/
- add requires to the server-devel package for the libs that are returned
by pg_config --libs
python-psycopg2 was updated to 2.8.4 to allow working with postgresql12.
Patch Instructions:
To install this SUSE Recommended Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Module for Server Applications 15-SP1:
zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP1-2020-1280=1
- SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1:
zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-1280=1
- SUSE Linux Enterprise Module for Basesystem 15-SP1:
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2020-1280=1
Package List:
- SUSE Linux Enterprise Module for Server Applications 15-SP1 (aarch64 ppc64le s390x x86_64):
libecpg6-12.2-3.5.2
libecpg6-debuginfo-12.2-3.5.2
postgresql10-contrib-10.12-8.13.10
postgresql10-contrib-debuginfo-10.12-8.13.10
postgresql10-debuginfo-10.12-8.13.10
postgresql10-debugsource-10.12-8.13.9
postgresql10-devel-10.12-8.13.9
postgresql10-devel-debuginfo-10.12-8.13.9
postgresql10-plperl-10.12-8.13.10
postgresql10-plperl-debuginfo-10.12-8.13.10
postgresql10-plpython-10.12-8.13.10
postgresql10-plpython-debuginfo-10.12-8.13.10
postgresql10-pltcl-10.12-8.13.10
postgresql10-pltcl-debuginfo-10.12-8.13.10
postgresql10-server-10.12-8.13.10
postgresql10-server-debuginfo-10.12-8.13.10
postgresql12-contrib-12.2-3.5.2
postgresql12-contrib-debuginfo-12.2-3.5.2
postgresql12-debuginfo-12.2-3.5.2
postgresql12-devel-12.2-3.5.2
postgresql12-devel-debuginfo-12.2-3.5.2
postgresql12-plperl-12.2-3.5.2
postgresql12-plperl-debuginfo-12.2-3.5.2
postgresql12-plpython-12.2-3.5.2
postgresql12-plpython-debuginfo-12.2-3.5.2
postgresql12-pltcl-12.2-3.5.2
postgresql12-pltcl-debuginfo-12.2-3.5.2
postgresql12-server-12.2-3.5.2
postgresql12-server-debuginfo-12.2-3.5.2
postgresql12-server-devel-12.2-3.5.2
postgresql12-server-devel-debuginfo-12.2-3.5.2
- SUSE Linux Enterprise Module for Server Applications 15-SP1 (s390x x86_64):
postgresql10-debugsource-10.12-8.13.10
postgresql12-debugsource-12.2-3.5.2
- SUSE Linux Enterprise Module for Server Applications 15-SP1 (noarch):
postgresql-contrib-12-8.11.3
postgresql-devel-12-8.11.3
postgresql-docs-12-8.11.3
postgresql-plperl-12-8.11.3
postgresql-plpython-12-8.11.3
postgresql-pltcl-12-8.11.3
postgresql-server-12-8.11.3
postgresql-server-devel-12-8.11.3
postgresql10-docs-10.12-8.13.10
postgresql12-docs-12.2-3.5.2
- SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (aarch64 ppc64le s390x x86_64):
postgresql10-debuginfo-10.12-8.13.10
postgresql10-debugsource-10.12-8.13.9
postgresql10-test-10.12-8.13.10
postgresql12-debuginfo-12.2-3.5.2
postgresql12-test-12.2-3.5.2
python-psycopg2-debuginfo-2.8.4-5.4.6
python-psycopg2-debugsource-2.8.4-5.4.6
python2-psycopg2-2.8.4-5.4.6
python2-psycopg2-debuginfo-2.8.4-5.4.6
- SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (aarch64 ppc64le s390x):
postgresql10-debugsource-10.12-8.13.10
postgresql12-debugsource-12.2-3.5.2
- SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (x86_64):
libecpg6-32bit-12.2-3.5.2
libecpg6-32bit-debuginfo-12.2-3.5.2
libpq5-32bit-12.2-3.5.2
libpq5-32bit-debuginfo-12.2-3.5.2
- SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (noarch):
postgresql-test-12-8.11.3
- SUSE Linux Enterprise Module for Basesystem 15-SP1 (aarch64 ppc64le s390x x86_64):
libpq5-12.2-3.5.2
libpq5-debuginfo-12.2-3.5.2
postgresql10-10.12-8.13.10
postgresql10-debuginfo-10.12-8.13.10
postgresql10-debugsource-10.12-8.13.9
postgresql12-12.2-3.5.2
postgresql12-debuginfo-12.2-3.5.2
python-psycopg2-debuginfo-2.8.4-5.4.6
python-psycopg2-debugsource-2.8.4-5.4.6
python3-psycopg2-2.8.4-5.4.6
python3-psycopg2-debuginfo-2.8.4-5.4.6
- SUSE Linux Enterprise Module for Basesystem 15-SP1 (aarch64 ppc64le s390x):
postgresql10-debugsource-10.12-8.13.10
postgresql12-debugsource-12.2-3.5.2
- SUSE Linux Enterprise Module for Basesystem 15-SP1 (noarch):
postgresql-12-8.11.3
References:
https://www.suse.com/security/cve/CVE-2019-10164.html
https://www.suse.com/security/cve/CVE-2020-1720.html
https://bugzilla.suse.com/1138034
https://bugzilla.suse.com/1151591
https://bugzilla.suse.com/1153168
https://bugzilla.suse.com/1163985
https://bugzilla.suse.com/1167541
More information about the sle-updates
mailing list