Medium ELSA-2017-1983 2 CVEs

Moderate: postgresql security and enhancement update (Oracle Linux 7)

Published Aug 7, 2017 · Updated Aug 7, 2017

Ecosystem: Oracle Linux

Summary

[9.2.21-1]
- update to 9.2.21 per release notes
http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
http://www.postgresql.org/docs/9.2/static/release-9-2-19.html

[9.2.18-2]
- package libpgport.a (rhbz#1305979)

Fixed packages 12

Release	Package	Fixed in
Oracle Linux · 7	postgresql	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-contrib	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-devel	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-docs	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-libs	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-plperl	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-plpython	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-pltcl	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-server	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-static	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-test	0:9.2.21-1.el7
Oracle Linux · 7	postgresql-upgrade	0:9.2.21-1.el7

Vulnerabilities 2

Unscored —

CVE-2017-7484

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before …

The PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql15 Ubuntu Alpine

May 12, 2017
Unscored —

CVE-2017-7486

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign serve…

The PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql15 Ubuntu Alpine

May 12, 2017