SUSE-SU-2015:0478-1: postgresql93-libs&distro=SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2015:0478-1 is a vulnerability in postgresql93-libs&distro=SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 23-02-2015PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for postgresql93 postgresql93 was updated to version 9.3.6 to fix four security issues. These security issues were fixed: - CVE-2015-0241: Fix buffer overruns in to_char() (bnc#916953). - CVE-2015-0243: Fix buffer overruns in contrib/pgcrypto (bnc#916953). - CVE-2015-0244: Fix possible loss of frontend/backend protocol synchronization after an error (bnc#916953). - CVE-2014-8161: Fix information leak via constraint-violation error messages (bnc#916953). This non-security issue was fixed: - Move the server socket from /tmp to /var/run to avoid problems with clients that use PrivateTmp (bnc#888564). More information is available at http://www.postgresql.org/docs/9.3/static/release-9-3-6.html
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse7 products
- postgresql93-libs&distro=SUSE Linux Enterprise Desktop 12< 9.3.6-5.1
- postgresql93-libs&distro=SUSE Linux Enterprise Server 12< 9.3.6-5.1
- postgresql93-libs&distro=SUSE Linux Enterprise Server for SAP Applications 12< 9.3.6-5.1
- postgresql93-libs&distro=SUSE Linux Enterprise Software Development Kit 12< 9.3.6-5.1
- postgresql93&distro=SUSE Linux Enterprise Desktop 12< 9.3.6-5.2
1 vendor · 7 products
References
7 links- bugzilla.suse.com/888564REPORT
- bugzilla.suse.com/916953REPORT