Fedora 21 : postgis-2.1.7-1.fc21 (2015-5575)

Update to latest release, which includes security fixes. Update to 2.1.6, per changes described at: http://postgis.net/2015/03/20/postgis-2.1.6 enable json-c for postigs, but disable it for upgrade part Rebuild for Proj 4.9.1 Note that Tenable Network Security has extracted the preceding...

Fedora Update for postgis FEDORA-2015-5575

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 21 Update: postgis-2.1.7-1.fc21

PostGIS adds support for geographic objects to the PostgreSQL object-relati onal database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informa tion systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

Updated mapserver packages fix CVE-2013-7262 and packaging issues

Updated mapserver packages fix security vulnerability: SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TI...

MapServer < 5.6.9 / 6.0.4 / 6.2.2 / 6.4.1 SQL Injection

The version of MapServer hosted on the remote web server may be affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input. Specifically, the mPostGISLayerSetTimeFilter function in mappostgis.c does not properly sanitize user-supplied input passed via...

MapServer PostGIS TIME Filter SQL注入漏洞

CVE ID：CVE-2013-7262 MapServer是用于创建交互式地图应用的多平台程序。 某些传递到PostGIS TIME filters的未明输入在用于SQL查询前未能正确过滤，攻击者可以通过注入任意SQL代码操纵SQL查询。 0 MapServer 6.x 厂商补丁： MapServer ----- MapServer 6.4.1版本以修复此漏洞，建议用户下载使用： http://www.mapserver.org/development/changelog/changelog-6-4.htmlchanges-from-6-4-0-to-6-4-1...

DEBIAN-CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

Sql injection

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

CVE-2013-7262: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

PT-2014-3313

Name of the Vulnerable Software and Affected Versions MapServer versions prior to 6.4.1 Description The issue is related to a SQL injection vulnerability in the msPostGISLayerSetTimeFilter function when a WMS-Time service is used. This allows remote attackers to execute arbitrary SQL commands via...