121 matches found
Moderate: Red Hat Security Advisory: postgresql92-postgresql security update
Updated postgresql92-postgresql packages that fix three security issues are now available for Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
postgresql security update
CentOS Errata and Security Advisory CESA-2015:1194 Updated postgresql packages that fix three security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...
PostgreSQL Multiple Vulnerabilities (May 2015) - Linux
PostgreSQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...
SUSE SLED11 / SLES11 Security Update : postgresql91 (SUSE-SU-2015:1091-1)
This update provides PostgreSQL 9.1.18, which brings fixes for security issues and other enhancements. The following vulnerabilities have been fixed : CVE-2015-3165: Avoid possible crash when client disconnects. bsc931972 CVE-2015-3166: Consistently check for failure of the printf. bsc931973...
PostgreSQL Multiple Vulnerabilities (May 2015) - Windows
PostgreSQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...
Debian DLA-227-1 : postgresql-8.4 update
Several vulnerabilities were discovered in PostgreSQL, a relational database server system. The 8.4 branch is EOLed upstream, but still present in Debian squeeze. This new LTS minor version contains the fixes that were applied upstream to the 9.0.20 version, backported to 8.4.22 which was the las...
[SECURITY] [DSA 3269-2] postgresql-9.1 regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3269-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 31, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA-227-1] postgresql-8.4 update
Package : postgresql-8.4 Version : 8.4.22lts2-0+deb6u2 CVE ID : CVE-2015-3165 CVE-2015-3166 CVE-2015-3167 Several vulnerabilities were discovered in PostgreSQL, a relational database server system. The 8.4 branch is EOLed upstream, but still present in Debian squeeze. This new LTS minor version...
CVE-2015-3165
CVE-2015-3165 is a PostgreSQL double-free remote-denial-of-service vulnerability. Affected: PostgreSQL versions pre-9.0.20, 9.1.x pre-9.1.16, 9.2.x pre-9.2.11, 9.3.x pre-9.3.7, and 9.4.x pre-9.4.2. Root cause: double-free during SSL session shutdown when the authentication timeout is expiring, al...
KLA10592 Denial of service vulnerability in PostgreSQL
Multiple serious vulnerabilities have been found in PostgreSQL. Malicious users can exploit these vulnerabilities to cause denial of service or conduct some other impact. Below is a complete list of vulnerabilities 1. Double free vulnerability can be exploited remotely via SSL session...
PostgreSQL 9.0 < 9.0.20 / 9.1 < 9.1.16 / 9.2 < 9.2.11 / 9.3 < 9.3.7 / 9.4 < 9.4.2 Multiple Vulnerabilities
The version of PostgreSQL installed on the remote host is 9.0.x prior to 9.0.20, 9.1.x prior to 9.1.16, 9.2.x prior to 9.2.11, 9.3.x prior to 9.3.7, or 9.4.x prior to 9.4.2. It is, therefore, affected by multiple vulnerabilities : - A double free memory error exists after authentication timeout,...
Debian DSA-3270-1 : postgresql-9.4 - security update
Several vulnerabilities have been found in PostgreSQL-9.4, a SQL database system. - CVE-2015-3165 Remote crash SSL clients disconnecting just before the authentication timeout expires can cause the server to crash. - CVE-2015-3166 Information exposure The replacement implementation of snprintf...
Debian DSA-3269-1 : postgresql-9.1 - security update
Several vulnerabilities have been found in PostgreSQL-9.1, a SQL database system. - CVE-2015-3165 Remote crash SSL clients disconnecting just before the authentication timeout expires can cause the server to crash. - CVE-2015-3166 Information exposure The replacement implementation of snprintf...
FreeBSD : PostgreSQL -- minor security problems. (fc38cd83-00b3-11e5-8ebd-0026551a22dc)
PostgreSQL project reports : This update fixes three security vulnerabilities reported in PostgreSQL over the past few months. Nether of these issues is seen as particularly urgent. However, users should examine them in case their installations are vulnerable:. - CVE-2015-3165 Double 'free' after...
[SECURITY] [DSA 3270-1] postgresql-9.4 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3270-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3270-1] postgresql-9.4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3270-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3269-1] postgresql-9.1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3269-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3269-1] postgresql-9.1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3269-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3269-1 (postgresql-9.1 - security update)
Several vulnerabilities have been found in PostgreSQL-9.1, a SQL database system. CVE-2015-3165 Remote crash SSL clients disconnecting just before the authentication timeout expires can cause the server to crash. CVE-2015-3166 Information exposure The replacement implementation of snprintf failed...
