shield Security update for postgresql93

SUSE-SLE-DESKTOP-12-2015-118

postgresql93 was updated to version 9.3.6 to fix four security issues. These security issues were fixed: - CVE-2015-0241: Fix buffer overruns in to_char() (bnc#916953). - CVE-2015-0243: Fix buffer overruns in contrib/pgcrypto (bnc#916953). - CVE-2015-0244: Fix possible loss of frontend/backend protocol synchronization after an error (bnc#916953). - CVE-2014-8161: Fix information leak via constraint-violation error messages (bnc#916953). This non-security issue was fixed: - Move the server socket from /tmp to /var/run to avoid problems with clients that use PrivateTmp (bnc#888564). More information is available at http://www.postgresql.org/docs/9.3/static/release-9-3-6.html

• Release Date
  Feb 23 2015
• References
  Bugzilla: 888564, 916953
  CVEs: CVE-2015-0241, CVE-2015-0243, CVE-2015-0244, CVE-2014-8161
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12 x86_64

• Packages
  libecpg6
  Shared Libraries Required for PostgreSQL Clients

  9.3.6-5.1 lock rpm

  libpq5
  Shared Libraries Required for PostgreSQL Clients

  9.3.6-5.1 lock rpm

  libpq5-32bit
  Shared Libraries Required for PostgreSQL Clients

  9.3.6-5.1 lock rpm

  postgresql93
  Basic Clients and Utilities for PostgreSQL

  9.3.6-5.2 lock rpm lock src

  postgresql93-libs
  Basic Clients and Utilities for PostgreSQL

  9.3.6-5.1 lock src