Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

SUSE: 2018:1695-1 Moderate Security Update for PostgreSQL96

suse
Calendar Grey June 14, 2018
Scroller Suse
SUSE releases important security patch for postgresql96 to fix a serious problem concerning log file handling. Please update at your earliest convenience.
An update that fixes one vulnerability is now available

Summary

PostgreSQL was updated to 9.6.9 fixing bugs and security issues: Release notes: - https://www.postgresql.org/about/news/postgresql-104-969-9513-9418-and-9323-released-1851/ - https://www.postgresql.org/docs/9.6/release-9-6-9.html A dump/restore is not required for those running 9.6.X. However, if you use the adminpack extension, you should update it as per the first changelog entry below. Also, if the function marking mistakes mentioned in the second and third changelog entries below affect you, you will want to take steps to correct your database catalogs. Security issue fixed: - CVE-2018-1115: Remove public execute privilege from contrib/adminpack's pg_logfile_rotate() function pg_logfile_rotate() is a deprecated wrapper

References

#1091610

Cross- CVE-2018-1115

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Desktop 12-SP3

https://www.suse.com/security/cve/CVE-2018-1115.html

https://bugzilla.suse.com/1091610

Announcement ID: SUSE-SU-2018:1695-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.