SUSE-SU-2017:1783-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2017/suse-su-20171783-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1783-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2017:1783-1
Related
Published
2017-07-05T14:17:54Z
Modified
2017-07-05T14:17:54Z
Summary
Security update for postgresql94
Details

This update for postgresql93 fixes the following issues:

  • bsc#1029547: Fix tests with timezone 2017a
  • CVE-2017-7486: Restrict visibility of pgusermappings.umoptions, to protect passwords stored as user mapping options. (bsc#1037624)
  • CVE-2017-7485: Recognize PGREQUIRESSL variable again. (bsc#1038293)
  • CVE-2017-7484: Prevent exposure of statistical information via leaky operators. (bsc#1037603)
References

Affected packages

SUSE:Linux Enterprise Software Development Kit 11 SP4 / postgresql94-libs

Package

Name
postgresql94-libs
Purl
pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.4.12-0.22.3

Ecosystem specific 

{
    "binaries": [
        {
            "postgresql94-devel": "9.4.12-0.22.3"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP4 / postgresql94

Package

Name
postgresql94
Purl
pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.4.12-0.22.3

Ecosystem specific 

{
    "binaries": [
        {
            "postgresql94": "9.4.12-0.22.3",
            "libecpg6": "9.4.12-0.22.3",
            "libpq5-32bit": "9.4.12-0.22.3",
            "libpq5": "9.4.12-0.22.3",
            "postgresql94-contrib": "9.4.12-0.22.3",
            "postgresql94-docs": "9.4.12-0.22.3",
            "postgresql94-server": "9.4.12-0.22.3"
        }
    ]
}

SUSE:Linux Enterprise Server 11 SP4 / postgresql94-libs

Package

Name
postgresql94-libs
Purl
pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.4.12-0.22.3

Ecosystem specific 

{
    "binaries": [
        {
            "postgresql94": "9.4.12-0.22.3",
            "libecpg6": "9.4.12-0.22.3",
            "libpq5-32bit": "9.4.12-0.22.3",
            "libpq5": "9.4.12-0.22.3",
            "postgresql94-contrib": "9.4.12-0.22.3",
            "postgresql94-docs": "9.4.12-0.22.3",
            "postgresql94-server": "9.4.12-0.22.3"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 11 SP4 / postgresql94

Package

Name
postgresql94
Purl
pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.4.12-0.22.3

Ecosystem specific 

{
    "binaries": [
        {
            "postgresql94": "9.4.12-0.22.3",
            "libecpg6": "9.4.12-0.22.3",
            "libpq5-32bit": "9.4.12-0.22.3",
            "libpq5": "9.4.12-0.22.3",
            "postgresql94-contrib": "9.4.12-0.22.3",
            "postgresql94-docs": "9.4.12-0.22.3",
            "postgresql94-server": "9.4.12-0.22.3"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 11 SP4 / postgresql94-libs

Package

Name
postgresql94-libs
Purl
pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.4.12-0.22.3

Ecosystem specific 

{
    "binaries": [
        {
            "postgresql94": "9.4.12-0.22.3",
            "libecpg6": "9.4.12-0.22.3",
            "libpq5-32bit": "9.4.12-0.22.3",
            "libpq5": "9.4.12-0.22.3",
            "postgresql94-contrib": "9.4.12-0.22.3",
            "postgresql94-docs": "9.4.12-0.22.3",
            "postgresql94-server": "9.4.12-0.22.3"
        }
    ]
}