MGASA-2018-0446 - Updated postgresql9.4|6 packages fix security vulnerabilities

Publication date: 15 Nov 2018
URL: https://advisories.mageia.org/MGASA-2018-0446.html
Type: security
Affected Mageia releases: 6
CVE: CVE-2018-1058,
     CVE-2018-1115,
     CVE-2018-10915,
     CVE-2018-10925

A flaw was found in the way Postgresql allowed a user to modify the
behavior of a query for other users. An attacker with a user account
could use this flaw to execute code with the permissions of superuser in
the database (CVE-2018-1058).

Postgresql 9.6.x before 9.6.9 is vulnerable in the adminpack extension,
the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs
than pg_rorate_logfile. If the adminpack is added to a database, an
attacker able to connect to it could exploit this to force log rotation
(CVE-2018-1115).

Andrew Krasichkov discovered that libpq did not reset all its connection
state during reconnects (CVE-2018-10915).

It was discovered that some "CREATE TABLE" statements could disclose
server memory (CVE-2018-10925).

Fully fixing these security issues requires manual intervention.  See
the upstream advisories for details.

References:
- https://bugs.mageia.org/show_bug.cgi?id=22687
- https://www.postgresql.org/docs/9.4/release-9-4-17.html
- https://www.postgresql.org/docs/9.4/release-9-4-18.html
- https://www.postgresql.org/docs/9.4/release-9-4-19.html
- https://www.postgresql.org/docs/9.6/release-9-6-8.html
- https://www.postgresql.org/docs/9.6/release-9-6-9.html
- https://www.postgresql.org/docs/9.6/release-9-6-10.html
- https://www.postgresql.org/about/news/postgresql-103-968-9512-9417-and-9322-released-1834/
- https://www.postgresql.org/about/news/postgresql-104-969-9513-9418-and-9323-released-1851/
- https://www.postgresql.org/about/news/postgresql-105-9610-9514-9419-9324-and-11-beta-3-released-1878/
- https://www.debian.org/security/2018/dsa-4269
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1058
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1115
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10915
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10925

SRPMS:
- 6/core/postgresql9.4-9.4.19-1.mga6
- 6/core/postgresql9.6-9.6.10-3.mga6

Mageia 2018-0446: postgresql9.4|6 security update

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users

Summary

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database (CVE-2018-1058).
Postgresql 9.6.x before 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation (CVE-2018-1115).
Andrew Krasichkov discovered that libpq did not reset all its connection state during reconnects (CVE-2018-10915).
It was discovered that some "CREATE TABLE" statements could disclose server memory (CVE-2018-10925).
Fully fixing these security issues requires manual intervention. See the upstream advisories for details.

References

- https://bugs.mageia.org/show_bug.cgi?id=22687

- https://www.postgresql.org/docs/9.4/release-9-4-17.html

- https://www.postgresql.org/docs/9.4/release-9-4-18.html

- https://www.postgresql.org/docs/9.4/release-9-4-19.html

- https://www.postgresql.org/docs/9.6/release-9-6-8.html

- https://www.postgresql.org/docs/9.6/release-9-6-9.html

- https://www.postgresql.org/docs/9.6/release-9-6-10.html

- https://www.postgresql.org/about/news/postgresql-103-968-9512-9417-and-9322-released-1834/

- https://www.postgresql.org/about/news/postgresql-104-969-9513-9418-and-9323-released-1851/

- https://www.postgresql.org/about/news/postgresql-105-9610-9514-9419-9324-and-11-beta-3-released-1878/

- https://www.debian.org/security/2018/dsa-4269

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1058

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1115

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10915

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10925

Resolution

MGASA-2018-0446 - Updated postgresql9.4|6 packages fix security vulnerabilities

SRPMS

- 6/core/postgresql9.4-9.4.19-1.mga6

- 6/core/postgresql9.6-9.6.10-3.mga6

Severity
Publication date: 15 Nov 2018
URL: https://advisories.mageia.org/MGASA-2018-0446.html
Type: security
CVE: CVE-2018-1058, CVE-2018-1115, CVE-2018-10915, CVE-2018-10925

Related News

11.Locks IsometricPattern Esm H320
2 - 3 min read
The Kinsing hacker group, or H2Miner, has been orchestrating illicit cryptocurrency mining campaigns since 2019 and poses a persistent security
32.Lock Code Circular Esm H320
2 - 3 min read
The Kimsuky APT group, reportedly linked to North Korea's Reconnaissance General Bureau (RGB), has been identified deploying a Linux version of its
4.Lock AbstractDigital Esm H320
2 - 3 min read
Recent research sheds light on the security vulnerabilities prevalent in Linux vendor kernels due to flawed engineering processes that backport
28.Lock Globe Esm H320
1 - 2 min read
The intersection of Linux and quantum computing has become increasingly apparent, emphasizing the importance of Linux-based operating systems in
6.EmailConnection Touch Esm H320
2 - 3 min read
Recent security updates for Ubuntu and Debian have been released to address vulnerabilities in Thunderbird, the popular open-source mail and
30.Lock Globe Motherboard Esm H320
1 - 2 min read
As cybersecurity practitioners, we are no strangers to the constant threat of malicious actors and the importance of remaining vigilant to protect
22.Lock ScreenEffect Esm H320
1 - 2 min read
EndeavorOS Gemini is a captivating and charming desktop operating system based on Arch Linux. The new release includes a kernel upgrade, 3D graphics
25.@Sign Hook Keyboard Esm H320
1 min read
Cyber risk is increasing for individuals and organizations, making flexible and robust solutions for identifying spam and malware increasingly

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved