Lucene search

K
suseSuseOPENSUSE-SU-2017:2306-1
HistoryAug 31, 2017 - 3:06 a.m.

Security update for postgresql93 (important)

2017-08-3103:06:50
lists.opensuse.org
52

0.28 Low

EPSS

Percentile

96.4%

Postgresql93 was updated to 9.3.18 to fix the following issues:

  • CVE-2017-7547: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as user mapping
    options. (bsc#1051685)
  • CVE-2017-7546: Disallow empty passwords in all password-based
    authentication methods. (bsc#1051684)
  • CVE-2017-7548: lo_put() function ignores ACLs. (bsc#1053259)

The changelog for the release is here:

    <a href="https://www.postgresql.org/docs/9.3/static/release-9-3-18.html">https://www.postgresql.org/docs/9.3/static/release-9-3-18.html</a>

This update was imported from the SUSE:SLE-12:Update update project.