Lucene search
UbuntuUSN-2772-1HistoryOct 16, 2015 - 12:00 a.m.
PostgreSQL vulnerabilities
2015-10-1600:00:00
ubuntu.com
30
Releases
- Ubuntu 15.04
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- postgresql-9.1 - Object-relational SQL database
- postgresql-9.3 - Object-relational SQL database
- postgresql-9.4 - Object-relational SQL database
Details
Josh Kupershmidt discovered the pgCrypto extension could expose
several bytes of server memory if the crypt() function was provided a
too-short salt. An attacker could use this flaw to read private data.
(CVE-2015-5288)
Oskari Saarenmaa discovered that the json and jsonb handlers could exhaust
available stack space. An attacker could use this flaw to perform a denial
of service attack. This issue only affected Ubuntu 14.04 LTS and Ubuntu
15.04. (CVE-2015-5289)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 15.04 | noarch | postgresql-9.4 | <Â 9.4.5-0ubuntu0.15.04 | UNKNOWN |
| Ubuntu | 15.04 | noarch | libecpg-compat3 | <Â 9.4.5-0ubuntu0.15.04 | UNKNOWN |
| Ubuntu | 15.04 | noarch | libecpg-compat3-dbgsym | <Â 9.4.5-0ubuntu0.15.04 | UNKNOWN |
| Ubuntu | 15.04 | noarch | libecpg-dev | <Â 9.4.5-0ubuntu0.15.04 | UNKNOWN |
| Ubuntu | 15.04 | noarch | libecpg-dev-dbgsym | <Â 9.4.5-0ubuntu0.15.04 | UNKNOWN |
| Ubuntu | 15.04 | noarch | libecpg6 | <Â 9.4.5-0ubuntu0.15.04 | UNKNOWN |
| Ubuntu | 15.04 | noarch | libecpg6-dbgsym | <Â 9.4.5-0ubuntu0.15.04 | UNKNOWN |
| Ubuntu | 15.04 | noarch | libpgtypes3 | <Â 9.4.5-0ubuntu0.15.04 | UNKNOWN |
| Ubuntu | 15.04 | noarch | libpgtypes3-dbgsym | <Â 9.4.5-0ubuntu0.15.04 | UNKNOWN |
| Ubuntu | 15.04 | noarch | libpq-dev | <Â 9.4.5-0ubuntu0.15.04 | UNKNOWN |
Related
nessus
nessus
Fedora 22 : postgresql-9.4.5-1.fc22 (2015-6d2a957a87)
2016-03-04 00:00:00
Debian DSA-3374-1 : postgresql-9.4 - security update
2015-10-20 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: postgresql-9.4.5-1.fc22
2015-11-21 16:56:13
[SECURITY] Fedora 23 Update: postgresql-9.4.5-1.fc23
2015-10-11 16:06:44
openvas
openvas
RedHat Update for postgresql RHSA-2015:2078-01
2015-11-20 00:00:00
CentOS Update for postgresql CESA-2015:2078 centos7
2015-11-20 00:00:00
Oracle: Security Advisory (ELSA-2015-2078)
2015-11-19 00:00:00
oraclelinux
oraclelinux
postgresql security update
2015-11-18 00:00:00
postgresql security update
2015-11-18 00:00:00
redhat
redhat
(RHSA-2015:2077) Moderate: rh-postgresql94-postgresql security update
2015-11-18 00:00:00
(RHSA-2015:2078) Moderate: postgresql security update
2015-11-18 15:11:05
(RHSA-2015:2083) Moderate: postgresql92-postgresql security update
2015-11-18 00:00:00
securityvulns
securityvulns
PostgreSQL security vulnerabilities
2015-10-19 00:00:00
[USN-2772-1] PostgreSQL vulnerabilities
2015-10-19 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:43:43
Denial Of Service (DoS)
2019-01-15 09:08:25
osv
osv
postgresql-9.4 - security update
2015-10-19 00:00:00
postgresql-8.4 - security update
2015-10-19 00:00:00
postgresql-9.1 - security update
2016-02-13 00:00:00
kaspersky
kaspersky
KLA10686 Multiple vulnerabilities in PostgreSQL
2015-10-08 00:00:00
debian
debian
[SECURITY] [DSA 3374-1] postgresql-9.4 security update
2015-10-19 15:41:00
[SECURITY] [DSA 3374-1] postgresql-9.4 security update
2015-10-19 15:40:39
[SECURITY] [DLA-329-1] postgresql-8.4 update
2015-10-19 10:08:57
amazon
amazon
Medium: postgresql92, postgresql93, postgresql94
2015-11-05 02:14:00
Medium: postgresql8
2015-12-14 10:00:00
mageia
mageia
Updated postgresql packages fix security vulnerabilities
2015-11-02 23:21:29
centos
centos
postgresql security update
2015-11-18 20:39:01
postgresql security update
2015-11-18 19:45:04
freebsd
freebsd
PostgreSQL -- minor security problems.
2015-10-08 00:00:00
postgresql
postgresql
Vulnerability in core server (CVE-2015-5289)
2015-10-26 14:59:00
Vulnerability in contrib module (CVE-2015-5288)
2015-10-26 14:59:00
ubuntucve
ubuntucve
CVE-2015-5288
2015-10-09 00:00:00
CVE-2015-5289
2015-10-09 00:00:00
cve
cve
CVE-2015-5288
2015-10-26 14:59:00
CVE-2015-5289
2015-10-26 14:59:00
prion
prion
Command injection
2015-10-26 14:59:00
Stack overflow
2015-10-26 14:59:00
cvelist
cvelist
CVE-2015-5289
2015-10-26 14:00:00
CVE-2015-5288
2015-10-26 14:00:00
suse
suse
Security update for postgresql94 (important)
2016-03-07 18:12:35
ibm
ibm
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2017-01-12 00:00:00