SUSE-SU-2018:0756-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2018:0756-1

MEDIUM6.5

Security update for postgresql96

Published Mar 21, 2018

Modified 8 years ago

Fix available

Details

Description of the patch:

This update for postgresql96 fixes the following issues:

Security issues fixed:

CVE-2018-1058: Fixed uncontrolled search path element in pg_dump and other client applications (bsc#1081925).

Bug fixes:

See release notes for details:
- https://www.postgresql.org/docs/9.6/static/release-9-6-8.html

Affected Packages

libecpg6

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

9.6.8-3.16.1

libpq5

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

9.6.8-3.16.1

libpq5-32bit

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP2

Fixed in:

9.6.8-3.16.1

postgresql96

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

Fixed in:

9.6.8-3.16.1

postgresql96-contrib

SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP3

Fixed in:

9.6.8-3.16.1

postgresql96-docs

Fixed in:

9.6.8-3.16.1

postgresql96-server

Fixed in:

9.6.8-3.16.1

postgresql96-devel

SUSE Linux Enterprise Software Development Kit 12 SP2SUSE Linux Enterprise Software Development Kit 12 SP3

Fixed in:

9.6.8-3.16.1