OPENSUSE-SU-2019:1773-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing bsc1138034. - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Bug fixes: ...

SUSE-SU-2019:1810-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing bsc1138034. - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Bug fixes: ...

SUSE-SU-2019:1783-3 Security update for postgresql10

This update for postgresql10 to version 10.9 fixes the following issue: Security issue fixed: - CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing bsc1138034. More information at https://www.postgresql.org/docs/10/release-10-9.html...

SUSE-SU-2018:3770-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2018-16850: Fixed improper quoting of transition table names when pgdump emits CREATE TRIGGER could have caused privilege escalation bsc1114837. Non-security issues fixed: - Update to release 10.6:...

SUSE-SU-2018:3377-1 Security update for postgresql96

This update for postgresql96 to 9.6.10 fixes the following issues: These security issues were fixed: - CVE-2018-10915: libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with 'host' or 'hostaddr' connection parameters from untrusted...

SUSE-SU-2018:3287-1 Security update for postgresql94

This update for postgresql94 fixes the following issues: postgresql was updated to 9.4.19: https://www.postgresql.org/docs/current/static/release-9-4-19.html CVE-2018-10915, bsc1104199: Fix failure to reset libpq's state fully between connection attempts. postgresql was updated to 9.4.18: -...

SUSE-SU-2018:3074-2 Security update for postgresql10

This update for brings postgresql10 version 10.5 to SUSE Linux Enterprise 12 SP3. FATE325659 bnc1108308 This release marks the change of the versioning scheme for PostgreSQL to a 'x.y' format. This means the next minor releases of PostgreSQL will be 10.1, 10.2, ... and the next major release will...

postgresql security update

9.2.24-1 - update to the latest 9.2 release - fix CVE-2018-10915...

SUSE-SU-2018:1695-1 Security update for postgresql96

PostgreSQL was updated to 9.6.9 fixing bugs and security issues: Release notes: - https://www.postgresql.org/about/news/1851/ - https://www.postgresql.org/docs/current/static/release-9-6-9.html A dump/restore is not required for those running 9.6.X. However, if you use the adminpack extension, yo...

SUSE-SU-2018:0756-1 Security update for postgresql96

This update for postgresql96 fixes the following issues: Security issues fixed: - CVE-2018-1058: Fixed uncontrolled search path element in pgdump and other client applications bsc1081925. Bug fixes: - See release notes for details: https://www.postgresql.org/docs/9.6/static/release-9-6-8.html...

SUSE-SU-2018:0755-1 Security update for postgresql94

This update for postgresql94 fixes the following issues: Security issues fixed: - CVE-2018-1058: Fixed uncontrolled search path element in pgdump and other client applications bsc1081925. Bug fixes: - See release notes for details: https://www.postgresql.org/docs/9.4/static/release-9-4-17.html...

SUSE-SU-2018:0675-1 Security update for postgresql94

This update for postgresql94 fixes the following issues: PostgreSQL was updated to version 9.4.15, the full release notes are here: https://www.postgresql.org/docs/9.4/static/release-9-4-15.html - CVE-2018-1053: Ensure that all temporary files made by pgupgrade are non-world-readable. bsc1077983...

SUSE-SU-2018:0081-1 Security update for postgresql94

This update for postgresql94 fixes the following issues: Security issues fixed: - CVE-2017-15098: Fix crash due to rowtype mismatch in jsonbpopulaterecordset bsc1067844. - CVE-2017-12172: Start scripts permit database administrator to modify root-owned files. This issue did not affect SUSE...

SUSE-SU-2018:0077-1 Security update for postgresql94

This update for postgresql94 fixes the following issues: Security issues fixed: - CVE-2017-15098: Fix crash due to rowtype mismatch in jsonbpopulaterecordset bsc1067844. - CVE-2017-12172: Start scripts permit database administrator to modify root-owned files. This issue did not affect SUSE...

SUSE-SU-2017:3107-1 Security update for postgresql-init

This update for postgresql-init fixes the following issues: - CVE-2017-14798: A race condition in the init script could be used by attackers able to access the postgresql account to escalate their privileges to root bsc1062722...

SUSE-SU-2017:2258-1 Security update for postgresql94

Postgresql94 was updated to 9.4.13 to fix the following issues: CVE-2017-7547: Further restrict visibility of pgusermappings.umoptions, to protect passwords stored as user mapping options. bsc1051685 CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. bsc1051684...

SUSE-SU-2017:2236-1 Security update for postgresql93

Postgresql93 was updated to 9.3.18 to fix the following issues: CVE-2017-7547: Further restrict visibility of pgusermappings.umoptions, to protect passwords stored as user mapping options. bsc1051685 CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. bsc1051684...

SUSE-SU-2017:1441-1 Security update for postgresql93

This update for postgresql93 fixes the following issues: The PostgreSQL package was updated to 9.3.17, bringing various bug and security fixes. Bug fixes: - bsc1029547: Fix tests with timezone 2017a - CVE-2017-7486: Restrict visibility of pgusermappings.umoptions, to protect passwords stored as...

SUSE-SU-2016:2418-1 Security update for postgresql94

This update for postgresql94 to version 9.4.9 fixes the several issues. These security issues were fixed: - CVE-2016-5423: CASE/WHEN with inlining can cause untrusted pointer dereference bsc993454. - CVE-2016-5424: Fix client programs' handling of special characters in database and role names...

SUSE-SU-2016:2414-1 Security update for postgresql93

This update for postgresql93 to version 9.3.14 fixes the several issues. These security issues were fixed: - CVE-2016-5423: CASE/WHEN with inlining can cause untrusted pointer dereference bsc993454. - CVE-2016-5424: Fix client programs' handling of special characters in database and role names...