Lucene search

K
mageiaGentoo FoundationMGASA-2017-0230
HistoryJul 30, 2017 - 6:58 p.m.

Updated postgresql9.4 packages fix security vulnerabilities

2017-07-3018:58:51
Gentoo Foundation
advisories.mageia.org
15

0.005 Low

EPSS

Percentile

77.4%

Robert Haas discovered that some selectivity estimators did not validate user privileges which could result in information disclosure (CVE-2017-7484). Daniel Gustafsson discovered that the PGREQUIRESSL environment variable did no longer enforce a TLS connection (CVE-2017-7485). Andrew Wheelwright discovered that user mappings were insufficiently restricted (CVE-2017-7486).