Security update for postgresql13 (moderate)

openSUSE Security Update: Security update for postgresql13 Announcement ID: openSUSE-SU-2021:3255-1 Rating: moderate References: 1179945 1185952 1187751 1189748 Cross-References: CVE-2021-3677 CVSS scores: CVE-2021-3677 SUSE: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products:...

MGASA-2021-0424 Updated postgresql packages fix security vulnerability

Memory disclosure in certain queries. CVE-2021-3677...

Updated postgresql packages fix security vulnerability

Memory disclosure in certain queries. CVE-2021-3677...

SUSE: Security Advisory (SUSE-SU-2021:3120-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PostgreSQL 11.x < 11.13, 12.x < 12.8, 13.x < 13.4 Memory Disclosure Vulnerability - Windows

PostgreSQL is prone to a memory disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...

SUSE SLED12: postgresql12 / postgresql12-contrib / postgresql12-devel / etc (SUSE-SU-2021:3119-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3119-1 advisory. - CVE-2021-3677: Fixed memory disclosure in certain queries bsc1189748. - Fixed build with llvm12 on s390x bsc1185952. - Re-enabled...

Security fix for the ALT Linux 9 package postgresql12-1C version 12.7-alt0.M90P.2

12.7-alt0.M90P.2 built Aug. 23, 2021 Alexei Takaseev in task 282411 Aug. 11, 2021 Alexei Takaseev - Fixes CVE-2021-3677...

PostgreSQL 11.x < 11.13 / 12.x < 12.8 / 13.x < 13.4 Memory Disclosure

The version of PostgreSQL installed on the remote host is 11 prior to 11.13, 12 prior to 12.8, or 13 prior to 13.4. As such, it is potentially affected by a memory disclosure vulnerability: - A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any...

Security fix for the ALT Linux 10 package postgresql12 version 12.8-alt1

12.8-alt1 built Aug. 16, 2021 Alexei Takaseev in task 282403 Aug. 11, 2021 Alexei Takaseev - 12.8 Fixes CVE-2021-3677...

FreeBSD : PostgreSQL server -- Memory disclosure in certain queries (b471130b-fb86-11eb-87db-6cc21735f730)

The PostgreSQL Project reports : A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...

Vulnerability in core server (CVE-2021-3677)

Memory disclosure in certain queries A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...

Security fix for the ALT Linux 10 package postgresql14 version 13.4-alt1

Aug. 11, 2021 Alexei Takaseev 13.4-alt1 - 13.4 Fixes CVE-2021-3677...

Security fix for the ALT Linux 10 package postgresql15-1C version 12.7-alt2

Aug. 11, 2021 Alexei Takaseev 12.7-alt2 - Fixes CVE-2021-3677...

Security fix for the ALT Linux 10 package postgresql15 version 13.4-alt1

Aug. 11, 2021 Alexei Takaseev 13.4-alt1 - 13.4 Fixes CVE-2021-3677...

Ubuntu: Security Advisory (USN-3677-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3677-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3677-2 advisory. USN-3677-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement H...

CVE-2016-3677

The Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...

CVE-2016-3677

Huawei Wear App for Android is affected (versions before 15.0.0.307) by CVE-2016-3677 due to lack of SSL certificate validation. This allows local users to cause unspecified impact via unknown vectors. Remediation per Huawei advisory is to update to a fixed version (15.0.0.307 or later); exploita...

Oracle: Security Advisory (ELSA-2010-0825)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3677

CVE-2015-3677 affects Apple OS X prior to 10.10.4, specifically the LZVN compression feature in AppleFSCompression. The vulnerability allows a crafted app to disclose kernel memory layout, a memory-disclosure issue in LZVN processing. The underlying impact is partial leakage of kernel memory layo...