Ubuntu: Security Advisory (USN-3744-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : PostgreSQL vulnerabilities (USN-3744-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3744-1 advisory. Andrew Krasichkov discovered that the PostgreSQL client library incorrectly reset its internal state between connections. A remot...

USN-3744-1: PostgreSQL vulnerabilities

Andrew Krasichkov discovered that the PostgreSQL client library incorrectly reset its internal state between connections. A remote attacker could possibly use this issue to bypass certain client-side connection security features. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS...

Fedora 27 : postgresql (2018-d8f5aea89d)

update to 9.6.10, CVE-2018-10915 CVE-2018-10925 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.10-alt0.M80P.1

9.6.10-alt0.M80P.1 built Aug. 15, 2018 Alexei Takaseev in task 211293 Aug. 11, 2018 Alexei Takaseev - 9.6.10 - Fixes CVE-2018-10915, CVE-2018-10925...

Security fix for the ALT Linux 8 package postgresql10 version 10.5-alt0.M80P.1

10.5-alt0.M80P.1 built Aug. 15, 2018 Alexei Takaseev in task 211293 Aug. 11, 2018 Alexei Takaseev - 10.5 - Fixes CVE-2018-10915, CVE-2018-10925...

Fedora Update for postgresql FEDORA-2018-5d1f7bd2d7

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PostgreSQL 'libpq' Security Bypass Vulnerability (Aug 2018) - Linux

PostgreSQL is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...

Debian DSA-4269-1 : postgresql-9.6 - security update

Two vulnerabilities have been found in the PostgreSQL database system : - CVE-2018-10915 Andrew Krasichkov discovered that libpq did not reset all its connection state during reconnects. - CVE-2018-10925 It was discovered that some 'CREATE TABLE' statements could disclose server memory. For...

Security fix for the ALT Linux 8 package postgresql11 version 10.5-alt1

Aug. 11, 2018 Alexei Takaseev 10.5-alt1 - 10.5 - Fix CVE-2018-10915, CVE-2018-10925...

Security fix for the ALT Linux 8 package postgresql11-1C version 10.5-alt1

Aug. 11, 2018 Alexei Takaseev 10.5-alt1 - 10.5 - Fix CVE-2018-10915, CVE-2018-10925...

Security fix for the ALT Linux 8 package postgresql12 version 10.5-alt1

Aug. 11, 2018 Alexei Takaseev 10.5-alt1 - 10.5 - Fix CVE-2018-10915, CVE-2018-10925...

Security fix for the ALT Linux 9 package postgresql12 version 10.5-alt1

Aug. 11, 2018 Alexei Takaseev 10.5-alt1 - 10.5 - Fixes CVE-2018-10915, CVE-2018-10925...

[SECURITY] [DSA 4269-1] postgresql-9.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4269-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 10, 2018 https://www.debian.org/security/faq -...

CVE-2018-10915

CVE-2018-10915 affects libpq: the PostgreSQL client library may fail to reset internal state between connections, enabling untrusted host/hostaddr parameters to bypass client-side security and potentially enable access to higher-privilege connections or related SQL-injection impacts via PQescape(...

Debian: Security Advisory (DSA-4269-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA11300 Multiple vulnerabilities in PostgreSQL

Multiple serious vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions and obtain sensitive information. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in libpq can be exploited remotely to bypass...

Debian: Security Advisory (DLA-1132-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for xen (openSUSE-SU-2017:1826-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : xen (openSUSE-2017-799)

This update for xen fixes several issues. These security issues were fixed : - CVE-2017-10912: Page transfer might have allowed PV guest to elevate privilege XSA-217, bsc1042882 - CVE-2017-10913 CVE-2017-10914: Races in the grant table unmap code allowed for informations leaks and potentially...