Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2158-1

Опубликовано: 15 окт. 2019
Источник: suse-cvrf

Описание

Security update for postgresql94

This update for postgresql94 fixes the following issues:

Security issue fixed:

  • CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner (bsc#1145092).

Список пакетов

SUSE Enterprise Storage 4
postgresql94-9.4.24-21.25.1
postgresql94-contrib-9.4.24-21.25.1
postgresql94-docs-9.4.24-21.25.1
postgresql94-plperl-9.4.24-21.25.1
postgresql94-plpython-9.4.24-21.25.1
postgresql94-pltcl-9.4.24-21.25.1
postgresql94-server-9.4.24-21.25.1
SUSE Linux Enterprise Server 12 SP1-LTSS
postgresql94-9.4.24-21.25.1
postgresql94-contrib-9.4.24-21.25.1
postgresql94-docs-9.4.24-21.25.1
postgresql94-plperl-9.4.24-21.25.1
postgresql94-plpython-9.4.24-21.25.1
postgresql94-pltcl-9.4.24-21.25.1
postgresql94-server-9.4.24-21.25.1
SUSE Linux Enterprise Server 12 SP2-BCL
postgresql94-9.4.24-21.25.1
postgresql94-contrib-9.4.24-21.25.1
postgresql94-docs-9.4.24-21.25.1
postgresql94-plperl-9.4.24-21.25.1
postgresql94-plpython-9.4.24-21.25.1
postgresql94-pltcl-9.4.24-21.25.1
postgresql94-server-9.4.24-21.25.1
SUSE Linux Enterprise Server 12 SP2-LTSS
postgresql94-9.4.24-21.25.1
postgresql94-contrib-9.4.24-21.25.1
postgresql94-docs-9.4.24-21.25.1
postgresql94-plperl-9.4.24-21.25.1
postgresql94-plpython-9.4.24-21.25.1
postgresql94-pltcl-9.4.24-21.25.1
postgresql94-server-9.4.24-21.25.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
postgresql94-9.4.24-21.25.1
postgresql94-contrib-9.4.24-21.25.1
postgresql94-docs-9.4.24-21.25.1
postgresql94-plperl-9.4.24-21.25.1
postgresql94-plpython-9.4.24-21.25.1
postgresql94-pltcl-9.4.24-21.25.1
postgresql94-server-9.4.24-21.25.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
postgresql94-9.4.24-21.25.1
postgresql94-contrib-9.4.24-21.25.1
postgresql94-docs-9.4.24-21.25.1
postgresql94-plperl-9.4.24-21.25.1
postgresql94-plpython-9.4.24-21.25.1
postgresql94-pltcl-9.4.24-21.25.1
postgresql94-server-9.4.24-21.25.1
SUSE OpenStack Cloud 7
postgresql94-9.4.24-21.25.1
postgresql94-contrib-9.4.24-21.25.1
postgresql94-docs-9.4.24-21.25.1
postgresql94-plperl-9.4.24-21.25.1
postgresql94-plpython-9.4.24-21.25.1
postgresql94-pltcl-9.4.24-21.25.1
postgresql94-server-9.4.24-21.25.1

Ссылки

Описание

A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.

Затронутые продукты
SUSE Enterprise Storage 4:postgresql94-9.4.24-21.25.1
SUSE Enterprise Storage 4:postgresql94-contrib-9.4.24-21.25.1
SUSE Enterprise Storage 4:postgresql94-docs-9.4.24-21.25.1
SUSE Enterprise Storage 4:postgresql94-plperl-9.4.24-21.25.1
Ссылки