Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0756-1

Опубликовано: 21 мар. 2018
Источник: suse-cvrf

Описание

Security update for postgresql96

This update for postgresql96 fixes the following issues:

Security issues fixed:

  • CVE-2018-1058: Fixed uncontrolled search path element in pg_dump and other client applications (bsc#1081925).

Bug fixes:

Список пакетов

SUSE Linux Enterprise Desktop 12 SP2
libecpg6-9.6.8-3.16.1
libpq5-9.6.8-3.16.1
libpq5-32bit-9.6.8-3.16.1
postgresql96-9.6.8-3.16.1
SUSE Linux Enterprise Desktop 12 SP3
libecpg6-9.6.8-3.16.1
libpq5-9.6.8-3.16.1
libpq5-32bit-9.6.8-3.16.1
postgresql96-9.6.8-3.16.1
SUSE Linux Enterprise Server 12 SP2
libecpg6-9.6.8-3.16.1
libpq5-9.6.8-3.16.1
libpq5-32bit-9.6.8-3.16.1
postgresql96-9.6.8-3.16.1
postgresql96-contrib-9.6.8-3.16.1
postgresql96-docs-9.6.8-3.16.1
postgresql96-server-9.6.8-3.16.1
SUSE Linux Enterprise Server 12 SP3
libecpg6-9.6.8-3.16.1
libpq5-9.6.8-3.16.1
libpq5-32bit-9.6.8-3.16.1
postgresql96-9.6.8-3.16.1
postgresql96-contrib-9.6.8-3.16.1
postgresql96-docs-9.6.8-3.16.1
postgresql96-server-9.6.8-3.16.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libecpg6-9.6.8-3.16.1
libpq5-9.6.8-3.16.1
postgresql96-9.6.8-3.16.1
postgresql96-contrib-9.6.8-3.16.1
postgresql96-docs-9.6.8-3.16.1
postgresql96-server-9.6.8-3.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libecpg6-9.6.8-3.16.1
libpq5-9.6.8-3.16.1
libpq5-32bit-9.6.8-3.16.1
postgresql96-9.6.8-3.16.1
postgresql96-contrib-9.6.8-3.16.1
postgresql96-docs-9.6.8-3.16.1
postgresql96-server-9.6.8-3.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libecpg6-9.6.8-3.16.1
libpq5-9.6.8-3.16.1
libpq5-32bit-9.6.8-3.16.1
postgresql96-9.6.8-3.16.1
postgresql96-contrib-9.6.8-3.16.1
postgresql96-docs-9.6.8-3.16.1
postgresql96-server-9.6.8-3.16.1
SUSE Linux Enterprise Software Development Kit 12 SP2
postgresql96-devel-9.6.8-3.16.1
SUSE Linux Enterprise Software Development Kit 12 SP3
postgresql96-devel-9.6.8-3.16.1

Ссылки

Описание

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:libecpg6-9.6.8-3.16.1
SUSE Linux Enterprise Desktop 12 SP2:libpq5-32bit-9.6.8-3.16.1
SUSE Linux Enterprise Desktop 12 SP2:libpq5-9.6.8-3.16.1
SUSE Linux Enterprise Desktop 12 SP2:postgresql96-9.6.8-3.16.1
Ссылки