SUSE-SU-2015:1091-1
Security update for postgresql91
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update provides PostgreSQL 9.1.18, which brings fixes for security issues and other enhancements. The following vulnerabilities have been fixed: * CVE-2015-3165: Avoid possible crash when client disconnects. (bsc#931972) * CVE-2015-3166: Consistently check for failure of the *printf(). (bsc#931973) * CVE-2015-3167: In contrib/pgcrypto, uniformly report decryption failures. (bsc#931974) For a comprehensive list of changes, please refer to http://www.postgresql.org/docs/9.1/static/release-9-1-18.html <http://www.postgresql.org/docs/9.1/static/release-9-1-18.html> . This update also includes changes in PostgreSQL's packaging to prepare for the migration to the new major version 9.4. (FATE#316970, bsc#907651) Security Issues: * CVE-2015-3165 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3165> * CVE-2015-3166 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3166> * CVE-2015-3167 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3167>
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 11.3 | postgresql91, postgresql91-contrib, postgresql91-devel y 2 más | 9.1.18-0.3.1 |
Mostrar las 5 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 11.3 | postgresql91 | 9.1.18-0.3.1 |
| SUSE Linux Enterprise 11.3 | postgresql91-contrib | 9.1.18-0.3.1 |
| SUSE Linux Enterprise 11.3 | postgresql91-devel | 9.1.18-0.3.1 |
| SUSE Linux Enterprise 11.3 | postgresql91-docs | 9.1.18-0.3.1 |
| SUSE Linux Enterprise 11.3 | postgresql91-server | 9.1.18-0.3.1 |
Referencias
- https://bugzilla.suse.com/907651
- https://bugzilla.suse.com/931972
- https://bugzilla.suse.com/931973
- https://bugzilla.suse.com/931974
- https://bugzilla.suse.com/932040
- https://lists.suse.com/pipermail/sle-security-updates/2015-June/001446.html
- https://www.suse.com/security/cve/CVE-2015-3165/
- https://www.suse.com/security/cve/CVE-2015-3166/