SUSE-SU-2015:1264-1
Security update for postgresql93
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
PostgreSQL was updated to the security and bugfix release 9.3.8 including 9.3.7. Security issues fixed: * CVE-2015-3165, bsc#931972: Avoid possible crash when client disconnects just before the authentication timeout expires. * CVE-2015-3166, bsc#931973: Consistently check for failure of the printf() family of functions. * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report decryption failures as 'Wrong key or corrupt data' Bugs fixed: * Protect against wraparound of multixact member IDs. * Avoid failures while fsync'ing data directory during crash restart. * Fix pg_get_functiondef() to show functions' LEAKPROOF property, if set. * Allow libpq to use TLS protocol versions beyond v1. - For the full release notes, see the following two URLs http://www.postgresql.org/docs/9.3/static/release-9-3-8.html http://www.postgresql.org/docs/9.3/static/release-9-3-7.html
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12 | libecpg6, libpq5, libpq5-32bit und 5 weitere | 9.3.8-8.1 |
Alle 8 Einträge aus 1 Quelle zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12 | libecpg6 | 9.3.8-8.1 |
| SUSE Linux Enterprise 12 | libpq5 | 9.3.8-8.1 |
| SUSE Linux Enterprise 12 | libpq5-32bit | 9.3.8-8.1 |
| SUSE Linux Enterprise 12 | postgresql93 | 9.3.8-8.1 |
| SUSE Linux Enterprise 12 | postgresql93-contrib | 9.3.8-8.1 |
| SUSE Linux Enterprise 12 | postgresql93-devel | 9.3.8-8.1 |
| SUSE Linux Enterprise 12 | postgresql93-docs | 9.3.8-8.1 |
| SUSE Linux Enterprise 12 | postgresql93-server | 9.3.8-8.1 |
Referenzen
- https://bugzilla.suse.com/931972
- https://bugzilla.suse.com/931973
- https://bugzilla.suse.com/931974
- https://lists.suse.com/pipermail/sle-security-updates/2015-July/001499.html
- https://www.suse.com/security/cve/CVE-2015-3165/
- https://www.suse.com/security/cve/CVE-2015-3166/
- https://www.suse.com/security/cve/CVE-2015-3167/
- https://www.suse.com/support/security/rating/