shield Security update for postgresql93

SUSE-SLE-SAP-12-2017-881

This update for postgresql93 fixes the following issues: The PostgreSQL package was updated to 9.3.17, bringing various bug and security fixes. Bug fixes: - bsc#1029547: Fix tests with timezone 2017a - CVE-2017-7486: Restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1037624) - CVE-2017-7485: Recognize PGREQUIRESSL variable again. (bsc#1038293) - CVE-2017-7484: Prevent exposure of statistical information via leaky operators. (bsc#1037603) More details can be found in the PostgreSQL release announcements: - https://www.postgresql.org/docs/9.3/static/release-9-3-17.html - https://www.postgresql.org/docs/9.3/static/release-9-3-16.html - https://www.postgresql.org/docs/9.3/static/release-9-3-15.html

• Release Date
  May 30 2017
• References
  Bugzilla: 1029547, 1037603, 1038293, 1037624
  CVEs: CVE-2017-7484, CVE-2017-7485, CVE-2017-7486
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12 x86_64

• Packages
  postgresql93
  Basic Clients and Utilities for PostgreSQL

  9.3.17-24.2 lock rpm lock src

  postgresql93-contrib
  Contributed Extensions and Additions to PostgreSQL

  9.3.17-24.2 lock rpm

  postgresql93-docs
  HTML Documentation for PostgreSQL

  9.3.17-24.2 lock rpm

  postgresql93-server
  The Programs Needed to Create and Run a PostgreSQL Server

  9.3.17-24.2 lock rpm