drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in Postgresql
Name: |
Mehrere Probleme in Postgresql |
|
ID: |
DSA-3475-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian wheezy |
|
Datum: |
So, 14. Februar 2016, 00:02 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5288
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0766
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0773 |
|
Applikationen: |
PostgreSQL |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3475-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 13, 2016 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : postgresql-9.1 CVE ID : CVE-2015-5288 CVE-2016-0766 CVE-2016-0773
Several vulnerabilities have been found in PostgreSQL-9.1, a SQL database system.
CVE-2015-5288
Josh Kupershmidt discovered a vulnerability in the crypt() function in the pgCrypto extension. Certain invalid salt arguments can cause the server to crash or to disclose a few bytes of server memory.
CVE-2016-0766
A privilege escalation vulnerability for users of PL/Java was discovered. Certain custom configuration settings (GUCs) for PL/Java will now be modifiable only by the database superuser to mitigate this issue.
CVE-2016-0773
Tom Lane and Greg Stark discovered a flaw in the way PostgreSQL processes specially crafted regular expressions. Very large character ranges in bracket expressions could cause infinite loops or memory overwrites. A remote attacker can exploit this flaw to cause a denial of service or, potentially, to execute arbitrary code.
For the oldstable distribution (wheezy), these problems have been fixed in version 9.1.20-0+deb7u1.
We recommend that you upgrade your postgresql-9.1 packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJWv0ixAAoJEAVMuPMTQ89EuNgP/0azsiP94ZAneKHOfDFrIXvI DpBxUaAR5NswTCqdaYMhpqZl8NfcpZNfHH9oMCZrTN10kaDJXCyQ/i+pKTIE0xt6 CgLzhf+lsFCxZKFl3+exZ8UN1OHfvl5521Hm6N3QbETWSTcnoPWnR5x7Q0/ESmR0 9OGuW2Z+hmQ0Xu67AgYJQ6OcPAWtipDBbytaRzWXtcmett74W+6kIexG1vvJcuoG isWLkHpxtkamqroD+RiMi+4GFMx3mID0fhn3T+F61vk6EnoLcgMnRMhXKADRCbvH JD62DhSuhUl9OzUfYyQ/L/tweTetHZtgfW9cQ8tqAlob2tkJ3bWgfvIOsKg7NgTs jkUv5vHNhySgD/WHvg8nk77Z7zIJhO+7dOJGXYuN83cpAr3/LfP8VlimXaIyO493 fqtGFN0Drpl1ZeRh1DM4VpYhlKMgpey7bsE4SNnBfhQEaXBcoHJ9WIZWsVQccEdb VWfkVP6KFL2GgFx2QSOJ9kamdTEv9gX8P3AgEXrL5Cnj9K3gxuKVA6NXWykMbzOz LWFpunONFVJIBjITTpdE4ubwfYQSYJ7YvJr20Rv69ybVb25YXLR+joBc417FxP7R PdUVgbzmaiAF7+pWVSZvG8rIhI5R6O3FQtEc+24yr8h/IafkGFOweRuOr2EF6Im4 f9Js/VJ5xe7olIPVSKxZ =IcKj -----END PGP SIGNATURE-----
|
|
|
|