[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DLA 2331-1] posgresql-9.6 security update



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2331-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
August 17, 2020                               https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : posgresql-9.6
Version        : 9.6.19-0+deb9u1
CVE ID         : CVE-2020-14350

Andres Freund found an issue in the PostgreSQL database system where an
uncontrolled search path could allow users to run arbitrary SQL functions
with elevated priviledges when a superuser runs certain `CREATE EXTENSION'
statements.

For Debian 9 stretch, this problem has been fixed in version
9.6.19-0+deb9u1.

We recommend that you upgrade your posgresql-9.6 packages.

For the detailed security status of posgresql-9.6 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/posgresql-9.6

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=6oiN
-----END PGP SIGNATURE-----


Reply to: