From:
[email protected]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-4269-1
[email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 10, 2018
https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : postgresql-9.6
CVE ID : CVE-2018-10915 CVE-2018-10925
Two vulnerabilities have been found in the PostgreSQL database system:
CVE-2018-10915
Andrew Krasichkov discovered that libpq did not reset all its
connection state during reconnects.
CVE-2018-10925
It was discovered that some "CREATE TABLE" statements could
disclose server memory.
For additional information please refer to the upstream announcement
at
https://www.postgresql.org/about/news/1878/
For the stable distribution (stretch), these problems have been fixed in version 9.6.10-0+deb9u1.
We recommend that you upgrade your postgresql-9.6 packages.
For the detailed security status of postgresql-9.6 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/postgresql-9.6
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at:
https://www.debian.org/security/
Mailing list:
[email protected]
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAltt9rkACgkQEMKTtsN8 Tjb5fRAAn7Sw1GAyqjO4hfrKtVvwizAFKEyfMOXlwXXKR+qTx3vebHZDfYKRHkBJ TJvaI94mLUG4XrhTh5oHJEXAnPeIGKfsJpUiLq68k1lfsqeMJB6rrpy98vpwWBjo ywRId7sEflJnuDLdPFnr3nOPIEgriSE9y1qfmLiywPjka+LokqzHi8HKtuGVMX3I ev0JB4s3XP/QFjwBGNFitSnoxx9XEqd8j3u279gy+Pbe8Wq1MJwAR86fAE7+kTQZ aMikdiBP3MjAFA59IX7rYCLstKOTpRnAiWB0gU8bIXXu15rD2nq8eg1X1jZ+3iDX IO6ENj4kjEcXMSpr/8++Jf+NEpyDJ7dSTGUHPsq4ov5le4Tc0luSX4qtV3kOkqXP B4N8LV3JHo3ClPeC/SLRv+W3i/jdemEJWL30KFxxjxT6gFnQxR2ODSryOjjSF+25 L989yZ3lyVy6SYYaoijfEDmbaKiW86e91O07K7XiDhC+uW+wL3xWI3w6n/93SKMQ i/8klXhoV3gCoDsc2uu8oVu48+ak1tsJBL/IU2xRCqNfRowO6GmBOwk7skff8LeH AxFnfILgLf5veYzUH/9Yj0kLjjBc2UdfeH1IJLiso6nUKGJSrnJL2PzqKQhVMpFa y+ab1Quif46D68tNH48oNjxEJfyRcV9yYOhkvdOuByxqT7nFvOc=
=Gx2V
-----END PGP SIGNATURE-----
--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)