Уведомление безопасности openSUSE-SU-2017:2391-1

Высокая (7.5)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

SUSE

libecpg6 (any) libecpg6-32bit (any) libecpg6-debuginfo (any) libecpg6-debuginfo-32bit (any) libpq5 (any) libpq5-32bit (any) libpq5-debuginfo (any) libpq5-debuginfo-32bit (any) postgresql96 (any) postgresql96-contrib (any) postgresql96-contrib-debuginfo (any) postgresql96-debuginfo (any) postgresql96-debugsource (any) postgresql96-devel (any) postgresql96-devel-debuginfo (any) postgresql96-docs (any) postgresql96-libs-debugsource (any) postgresql96-plperl (any) postgresql96-plperl-debuginfo (any) postgresql96-plpython (any) postgresql96-plpython-debuginfo (any) postgresql96-pltcl (any) postgresql96-pltcl-debuginfo (any) postgresql96-server (any) postgresql96-server-debuginfo (any) postgresql96-test (any)

Уведомление безопасности об уязвимостях openSUSE Leap 42.2, openSUSE Leap 42.3

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE Leap 42.2:
x86_64:
libpq5-32bit - 9.6.4-5.1
libecpg6-debuginfo-32bit - 9.6.4-5.1
libecpg6-32bit - 9.6.4-5.1
libpq5-debuginfo-32bit - 9.6.4-5.1
openSUSE Leap 42.2:
i586, x86_64:
postgresql96 - 9.6.4-5.1
postgresql96-contrib-debuginfo - 9.6.4-5.1
postgresql96-devel - 9.6.4-5.1
postgresql96-plpython-debuginfo - 9.6.4-5.1
postgresql96-libs-debugsource - 9.6.4-5.1
libecpg6 - 9.6.4-5.1
postgresql96-debugsource - 9.6.4-5.1
postgresql96-plperl-debuginfo - 9.6.4-5.1
postgresql96-plperl - 9.6.4-5.1
postgresql96-plpython - 9.6.4-5.1
postgresql96-pltcl-debuginfo - 9.6.4-5.1
postgresql96-pltcl - 9.6.4-5.1
postgresql96-contrib - 9.6.4-5.1
postgresql96-debuginfo - 9.6.4-5.1
postgresql96-devel-debuginfo - 9.6.4-5.1
libpq5 - 9.6.4-5.1
postgresql96-server-debuginfo - 9.6.4-5.1
postgresql96-test - 9.6.4-5.1
libecpg6-debuginfo - 9.6.4-5.1
libpq5-debuginfo - 9.6.4-5.1
postgresql96-server - 9.6.4-5.1
openSUSE Leap 42.2:
noarch:
postgresql96-docs - 9.6.4-5.1
openSUSE Leap 42.3:
x86_64:
libecpg6-32bit - 9.6.4-6.1
libpq5-debuginfo-32bit - 9.6.4-6.1
libpq5-32bit - 9.6.4-6.1
libecpg6-debuginfo-32bit - 9.6.4-6.1
openSUSE Leap 42.3:
i586, x86_64:
postgresql96-server-debuginfo - 9.6.4-6.1
postgresql96-plperl-debuginfo - 9.6.4-6.1
libpq5-debuginfo - 9.6.4-6.1
postgresql96-pltcl - 9.6.4-6.1
postgresql96-contrib - 9.6.4-6.1
postgresql96-plperl - 9.6.4-6.1
postgresql96-devel-debuginfo - 9.6.4-6.1
postgresql96-server - 9.6.4-6.1
postgresql96-pltcl-debuginfo - 9.6.4-6.1
libecpg6-debuginfo - 9.6.4-6.1
libpq5 - 9.6.4-6.1
libecpg6 - 9.6.4-6.1
postgresql96-devel - 9.6.4-6.1
postgresql96-test - 9.6.4-6.1
postgresql96-debugsource - 9.6.4-6.1
postgresql96-contrib-debuginfo - 9.6.4-6.1
postgresql96-libs-debugsource - 9.6.4-6.1
postgresql96-debuginfo - 9.6.4-6.1
postgresql96-plpython-debuginfo - 9.6.4-6.1
postgresql96-plpython - 9.6.4-6.1
postgresql96 - 9.6.4-6.1
openSUSE Leap 42.3:
noarch:
postgresql96-docs - 9.6.4-6.1

http://lists.opensuse.org/opensuse-security-announce/2017-09/msg00019.html
https://bugzilla.suse.com/1051684
https://bugzilla.suse.com/1051685
https://bugzilla.suse.com/1053259

Источник: CVE
Наименование: CVE-2017-7547
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7547

Источник: CVE
Наименование: CVE-2017-7546
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7546

Источник: CVE
Наименование: CVE-2017-7548
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7548