Security update for postgresql96 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:2356-1 Final 1 1 2017-09-05T15:32:49Z current 2017-09-05T15:32:49Z 2017-09-05T15:32:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for postgresql96 This update for postgresql96 fixes the following issues: * CVE-2017-7547: Further restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1051685) * CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. (bsc#1051684) * CVE-2017-7548: lo_put() function ignores ACLs. (bsc#1053259) The changelog for this release is here: https://www.postgresql.org/docs/9.6/static/release-9-6-4.html The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-6-2017-1461,SUSE-SLE-DESKTOP-12-SP2-2017-1461,SUSE-SLE-DESKTOP-12-SP3-2017-1461,SUSE-SLE-RPI-12-SP2-2017-1461,SUSE-SLE-SAP-12-2017-1461,SUSE-SLE-SAP-12-SP1-2017-1461,SUSE-SLE-SDK-12-SP2-2017-1461,SUSE-SLE-SDK-12-SP3-2017-1461,SUSE-SLE-SERVER-12-2017-1461,SUSE-SLE-SERVER-12-SP1-2017-1461,SUSE-SLE-SERVER-12-SP2-2017-1461,SUSE-SLE-SERVER-12-SP3-2017-1461 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20172356-1/ Link for SUSE-SU-2017:2356-1 https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00013.html E-Mail link for SUSE-SU-2017:2356-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1051684 SUSE Bug 1051684 https://bugzilla.suse.com/1051685 SUSE Bug 1051685 https://bugzilla.suse.com/1053259 SUSE Bug 1053259 https://www.suse.com/security/cve/CVE-2017-7546/ SUSE CVE CVE-2017-7546 page https://www.suse.com/security/cve/CVE-2017-7547/ SUSE CVE CVE-2017-7547 page https://www.suse.com/security/cve/CVE-2017-7548/ SUSE CVE CVE-2017-7548 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE OpenStack Cloud 6 libecpg6-9.6.4-3.6.1 libpq5-9.6.4-3.6.1 libpq5-32bit-9.6.4-3.6.1 postgresql96-9.6.4-3.6.1 postgresql96-contrib-9.6.4-3.6.1 postgresql96-docs-9.6.4-3.6.1 postgresql96-server-9.6.4-3.6.1 postgresql96-devel-9.6.4-3.6.1 libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libpq5-32bit-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpq5-32bit-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpq5-32bit-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS postgresql96-contrib-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS postgresql96-docs-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS postgresql96-server-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 libpq5-32bit-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql96-contrib-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql96-docs-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql96-server-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 libpq5-32bit-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 postgresql96-contrib-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 postgresql96-docs-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 postgresql96-server-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12-LTSS libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12-LTSS libpq5-32bit-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12-LTSS postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12-LTSS postgresql96-contrib-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12-LTSS postgresql96-docs-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12-LTSS postgresql96-server-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server 12-LTSS libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql96-contrib-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql96-docs-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql96-server-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libpq5-32bit-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql96-contrib-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql96-docs-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql96-server-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libpq5-32bit-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 postgresql96-contrib-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 postgresql96-docs-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 postgresql96-server-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libpq5-32bit-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 postgresql96-contrib-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 postgresql96-docs-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 postgresql96-server-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libecpg6-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libpq5-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libpq5-32bit-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 postgresql96-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 postgresql96-contrib-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 postgresql96-docs-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 postgresql96-server-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 postgresql96-devel-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 postgresql96-devel-9.6.4-3.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libecpg6-9.6.4-3.6.1 as a component of SUSE OpenStack Cloud 6 libpq5-9.6.4-3.6.1 as a component of SUSE OpenStack Cloud 6 libpq5-32bit-9.6.4-3.6.1 as a component of SUSE OpenStack Cloud 6 postgresql96-9.6.4-3.6.1 as a component of SUSE OpenStack Cloud 6 postgresql96-contrib-9.6.4-3.6.1 as a component of SUSE OpenStack Cloud 6 postgresql96-docs-9.6.4-3.6.1 as a component of SUSE OpenStack Cloud 6 postgresql96-server-9.6.4-3.6.1 as a component of SUSE OpenStack Cloud 6 PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password. CVE-2017-7546 SUSE Linux Enterprise Desktop 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP2:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Software Development Kit 12 SP2:postgresql96-devel-9.6.4-3.6.1 SUSE Linux Enterprise Software Development Kit 12 SP3:postgresql96-devel-9.6.4-3.6.1 SUSE OpenStack Cloud 6:libecpg6-9.6.4-3.6.1 SUSE OpenStack Cloud 6:libpq5-32bit-9.6.4-3.6.1 SUSE OpenStack Cloud 6:libpq5-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-contrib-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-docs-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-server-9.6.4-3.6.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172356-1/ https://www.suse.com/security/cve/CVE-2017-7546.html CVE-2017-7546 https://bugzilla.suse.com/1051684 SUSE Bug 1051684 https://bugzilla.suse.com/1054365 SUSE Bug 1054365 https://bugzilla.suse.com/1140876 SUSE Bug 1140876 PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so. CVE-2017-7547 SUSE Linux Enterprise Desktop 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP2:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Software Development Kit 12 SP2:postgresql96-devel-9.6.4-3.6.1 SUSE Linux Enterprise Software Development Kit 12 SP3:postgresql96-devel-9.6.4-3.6.1 SUSE OpenStack Cloud 6:libecpg6-9.6.4-3.6.1 SUSE OpenStack Cloud 6:libpq5-32bit-9.6.4-3.6.1 SUSE OpenStack Cloud 6:libpq5-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-contrib-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-docs-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-server-9.6.4-3.6.1 moderate 4.9 AV:N/AC:M/Au:S/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172356-1/ https://www.suse.com/security/cve/CVE-2017-7547.html CVE-2017-7547 https://bugzilla.suse.com/1051685 SUSE Bug 1051685 https://bugzilla.suse.com/1054365 SUSE Bug 1054365 https://bugzilla.suse.com/1140876 SUSE Bug 1140876 PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service. CVE-2017-7548 SUSE Linux Enterprise Desktop 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP2:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Desktop 12 SP3:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP2:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server 12-LTSS:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:libecpg6-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:libpq5-32bit-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:libpq5-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-contrib-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-docs-9.6.4-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql96-server-9.6.4-3.6.1 SUSE Linux Enterprise Software Development Kit 12 SP2:postgresql96-devel-9.6.4-3.6.1 SUSE Linux Enterprise Software Development Kit 12 SP3:postgresql96-devel-9.6.4-3.6.1 SUSE OpenStack Cloud 6:libecpg6-9.6.4-3.6.1 SUSE OpenStack Cloud 6:libpq5-32bit-9.6.4-3.6.1 SUSE OpenStack Cloud 6:libpq5-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-contrib-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-docs-9.6.4-3.6.1 SUSE OpenStack Cloud 6:postgresql96-server-9.6.4-3.6.1 important 8.5 AV:N/AC:L/Au:S/C:C/I:C/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172356-1/ https://www.suse.com/security/cve/CVE-2017-7548.html CVE-2017-7548 https://bugzilla.suse.com/1053259 SUSE Bug 1053259 https://bugzilla.suse.com/1054365 SUSE Bug 1054365 https://bugzilla.suse.com/1140876 SUSE Bug 1140876