SUSE-SU-2015:1264-1: postgresql93-libs&distro=SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2015:1264-1 is a vulnerability in postgresql93-libs&distro=SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 24-06-2015
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for postgresql93 PostgreSQL was updated to the security and bugfix release 9.3.8 including 9.3.7. Security issues fixed: * CVE-2015-3165, bsc#931972: Avoid possible crash when client disconnects just before the authentication timeout expires. * CVE-2015-3166, bsc#931973: Consistently check for failure of the printf() family of functions. * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report decryption failures as 'Wrong key or corrupt data' Bugs fixed: * Protect against wraparound of multixact member IDs. * Avoid failures while fsync'ing data directory during crash restart. * Fix pg_get_functiondef() to show functions' LEAKPROOF property, if set. * Allow libpq to use TLS protocol versions beyond v1. - For the full release notes, see the following two URLs http://www.postgresql.org/docs/9.3/static/release-9-3-8.html http://www.postgresql.org/docs/9.3/static/release-9-3-7.html

No weakness data has been published for this record.