SUSE-SU-2017:2258-1: postgresql94-libs&distro=SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:2258-1 is a vulnerability in postgresql94-libs&distro=SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 25-08-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for postgresql94 Postgresql94 was updated to 9.4.13 to fix the following issues: * CVE-2017-7547: Further restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1051685) * CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. (bsc#1051684) * CVE-2017-7548: lo_put() function ignores ACLs. (bsc#1053259) The changelog for this release is here: https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse11 products
- postgresql94-libs&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 9.4.13-0.23.5.1
- postgresql94-libs&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 9.4.13-0.23.5.1
- postgresql94-libs&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 9.4.13-0.23.5.1
- postgresql94-libs&distro=SUSE Linux Enterprise Server 11 SP4< 9.4.13-0.23.5.1
- postgresql94-libs&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 9.4.13-0.23.5.1
1 vendor · 11 products