starlingx
/
tools
Code Issues Proposed changes

Debian: postgresql: fix multiple CVEs 

Upgrade libpq5, libpq-dev, postgresql-13, postgresql-client-13
package version from 13.11-0+deb11u1 to 13.13-0+deb11u1 fix
CVE: CVE-2023-5868/CVE-2023-5869/CVE-2023-5870/CVE-2023-39417.

Refer to:
CVE-2023-5868: https://nvd.nist.gov/vuln/detail/CVE-2023-5868
CVE-2023-5869: https://nvd.nist.gov/vuln/detail/CVE-2023-5869
CVE-2023-5870: https://nvd.nist.gov/vuln/detail/CVE-2023-5870
CVE-2023-39417: https://nvd.nist.gov/vuln/detail/CVE-2023-39417

Test Plan:
Pass: downloader
Pass: build-pkgs --clean --all
Pass: build-image
Pass: boot

Closes-bug: #2043435

Change-Id: I699aebc4ca8144dba67d531a195968460b80a29e
Signed-off-by: Peng Zhang <Peng.Zhang2@windriver.com>
This commit is contained in:
Peng Zhang 2023-11-13 05:23:17 +00:00
parent d3c3805eef
commit 0b899d4bc4
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
debian-mirror-tools/config/debian/common/base-bullseye.lst
View File

@ -578,8 +578,8 @@ libpolkit-agent-1-0 0.105-31+deb11u1
libpolkit-gobject-1-dev 0.105-31+deb11u1
libpolkit-gobject-1-0 0.105-31+deb11u1
libpopt0 1.18-2
libpq5 13.11-0+deb11u1 https://snapshot.debian.org/archive/debian/20230515T030231Z/pool/main/p/postgresql-13/libpq5_13.11-0%2Bdeb11u1_amd64.deb
libpq-dev 13.11-0+deb11u1 https://snapshot.debian.org/archive/debian/20230515T030231Z/pool/main/p/postgresql-13/libpq-dev_13.11-0%2Bdeb11u1_amd64.deb
libpq5 13.13-0+deb11u1 https://snapshot.debian.org/archive/debian-security/20231113T212648Z/pool/updates/main/p/postgresql-13/libpq5_13.13-0%2Bdeb11u1_amd64.deb
libpq-dev 13.13-0+deb11u1 https://snapshot.debian.org/archive/debian-security/20231113T212648Z/pool/updates/main/p/postgresql-13/libpq-dev_13.13-0%2Bdeb11u1_amd64.deb
libprocps8 2:3.3.17-5
libprotobuf-c1 1.3.3-1+b2
libproxy1v5 0.4.17-1
@ -825,8 +825,8 @@ pipexec 2.5.5-2+b1
pm-utils 1.4.1-19
po-debconf 1.0.21+nmu1
policykit-1 0.105-31+deb11u1
postgresql-13 13.11-0+deb11u1 https://snapshot.debian.org/archive/debian/20230515T030231Z/pool/main/p/postgresql-13/postgresql-13_13.11-0%2Bdeb11u1_amd64.deb
postgresql-client-13 13.11-0+deb11u1 https://snapshot.debian.org/archive/debian/20230515T030231Z/pool/main/p/postgresql-13/postgresql-client-13_13.11-0%2Bdeb11u1_amd64.deb
postgresql-13 13.13-0+deb11u1 https://snapshot.debian.org/archive/debian-security/20231113T212648Z/pool/updates/main/p/postgresql-13/postgresql-13_13.13-0%2Bdeb11u1_amd64.deb
postgresql-client-13 13.13-0+deb11u1 https://snapshot.debian.org/archive/debian-security/20231113T212648Z/pool/updates/main/p/postgresql-13/postgresql-client-13_13.13-0%2Bdeb11u1_amd64.deb
postgresql-client-common 225
postgresql-common 225
powermgmt-base 1.36