Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:0765-1

Опубликовано: 21 мар. 2018
Источник: suse-cvrf

Описание

Security update for postgresql96

This update for postgresql96 fixes the following issues:

Security issues fixed:

  • CVE-2018-1058: Fixed uncontrolled search path element in pg_dump and other client applications (bsc#1081925).

Bug fixes:

This update was imported from the SUSE:SLE-12:Update update project.

Список пакетов

openSUSE Leap 42.3
libecpg6-9.6.8-15.1
libecpg6-32bit-9.6.8-15.1
libpq5-9.6.8-15.1
libpq5-32bit-9.6.8-15.1
postgresql96-9.6.8-15.1
postgresql96-contrib-9.6.8-15.1
postgresql96-devel-9.6.8-15.1
postgresql96-docs-9.6.8-15.1
postgresql96-libs-9.6.8-15.1
postgresql96-plperl-9.6.8-15.1
postgresql96-plpython-9.6.8-15.1
postgresql96-pltcl-9.6.8-15.1
postgresql96-server-9.6.8-15.1
postgresql96-test-9.6.8-15.1

Ссылки

Описание

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Затронутые продукты
openSUSE Leap 42.3:libecpg6-32bit-9.6.8-15.1
openSUSE Leap 42.3:libecpg6-9.6.8-15.1
openSUSE Leap 42.3:libpq5-32bit-9.6.8-15.1
openSUSE Leap 42.3:libpq5-9.6.8-15.1
Ссылки