Skip to content
OpenAdvisories
Medium ELSA-2017-3402 2 CVEs

Moderate: postgresql security update (Oracle Linux 7)

Published Dec 7, 2017 · Updated Dec 7, 2017

Ecosystem: Oracle Linux

Summary

[9.2.23-3]
- setup: keep PGSETUP_* variables after switching to not-privileged user

[9.2.23-2]
- fix CVE-2017-12172

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 7 postgresql 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-contrib 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-devel 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-docs 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-libs 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-plperl 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-plpython 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-pltcl 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-server 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-static 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-test 0:9.2.23-3.el7_4
Oracle Linux · 7 postgresql-upgrade 0:9.2.23-3.el7_4

Vulnerabilities 2

  • Medium 6.5
    CVE-2017-15097

    Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to t…

    Red Hat postgresql init script
  • Unscored —
    CVE-2017-12172

    PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2…

    Red Hat postgresql