[SECURITY] [DLA 3954-2] postgresql-13 - regression update
[SECURITY] [DSA 5812-2] postgresql-15 regression update
[SECURITY] [DLA 3954-2] postgresql-13 - regression update
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3954-2 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Bastien Roucariès
November 21, 2024 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : postgresql-13
Version : 13.18-0+deb11u1
CVE ID : CVE-2024-10978
The fix for CVE-2024-10978 accidentally caused settings for role to not
be applied if they come from non-interactive sources, including previous
ALTER {ROLE|DATABASE} commands and the PGOPTIONS environment variable.
For Debian 11 bullseye, this problem has been fixed in version
13.18-0+deb11u1.
We recommend that you upgrade your postgresql-13 packages.
For the detailed security status of postgresql-13 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/postgresql-13
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
[SECURITY] [DSA 5812-2] postgresql-15 regression update
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5812-2 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
November 21, 2024 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : postgresql-15
The postgresql minor release shipped in DSA 5812 introduced an ABI break,
which has been reverted so that extensions do not need to be rebuilt.
For the stable distribution (bookworm), this has been fixed in
version 15.10-0+deb12u1.
We recommend that you upgrade your postgresql-15 packages.
For the detailed security status of postgresql-15 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/postgresql-15
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
