SUSE-SU-2017:3391-1: postgresql96-libs&distro=SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:3391-1 is a vulnerability in postgresql96-libs&distro=SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 21-12-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for postgresql96 This update for postgresql96 fixes the following issues: Security issues fixed: - CVE-2017-15098: Fix crash due to rowtype mismatch in json{b}_populate_recordset() (bsc#1067844). - CVE-2017-15099: Ensure that INSERT ... ON CONFLICT DO UPDATE checks table permissions and RLS policies in all cases (bsc#1067841). Bug fixes: - Update to version 9.6.6: * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse16 products
- postgresql96-libs&distro=SUSE Linux Enterprise Desktop 12 SP2< 9.6.6-3.10.1
- postgresql96-libs&distro=SUSE Linux Enterprise Desktop 12 SP3< 9.6.6-3.10.1
- postgresql96-libs&distro=SUSE Linux Enterprise Server 12 SP2< 9.6.6-3.10.1
- postgresql96-libs&distro=SUSE Linux Enterprise Server 12 SP3< 9.6.6-3.10.1
- postgresql96-libs&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2< 9.6.6-3.10.1
1 vendor · 16 products