Lucene search

K
suseSuseSUSE-SU-2017:2355-1
HistorySep 05, 2017 - 9:07 p.m.

Security update for postgresql94 (important)

2017-09-0521:07:37
lists.opensuse.org
135

0.28 Low

EPSS

Percentile

96.4%

This update for postgresql94 fixes the following issues:

  • CVE-2017-7547: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as user mapping
    options. (bsc#1051685)
  • CVE-2017-7546: Disallow empty passwords in all password-based
    authentication methods. (bsc#1051684)
  • CVE-2017-7548: lo_put() function ignores ACLs. (bsc#1053259)