EUVD-2016-0783

Malware in sbrugna...

The vulnerabilities of Debian GNU/Linux and Ubuntu operating systems, along with the PostgreSQL database management system, allow attackers to enhance their privileges.

The vulnerability in the configuration of Debian GNU/Linux and Ubuntu operating systems, as well as PostgreSQL database management systems, is related to errors in restricting access to the GUCS component for PL/Java. Exploiting this vulnerability allows a malicious actor to increase their...

CVE-2016-0766: Undefined Security Weakness

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings GUCS for PL/Java, which allows attackers to gain privileges via unspecified vectors...

Debian DSA-3476-1 : postgresql-9.4 - security update

Several vulnerabilities have been found in PostgreSQL-9.4, a SQL database system. - CVE-2016-0766 A privilege escalation vulnerability for users of PL/Java was discovered. Certain custom configuration settings GUCs for PL/Java will now be modifiable only by the database superuser to mitigate this...

[SECURITY] [DSA 3475-1] postgresql-9.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3475-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 13, 2016 https://www.debian.org/security/faq -...