Lucene search

K
archlinuxArch LinuxASA-201505-17
HistoryMay 26, 2015 - 12:00 a.m.

postgresql: multiple issues

2015-05-2600:00:00
Arch Linux
lists.archlinux.org
19

0.085 Low

EPSS

Percentile

94.5%

  • CVE-2015-3165 (denial of service)

SSL clients disconnecting just before the authentication timeout expires
can cause the server to crash via a double-free issue leading to denial
of service.

  • CVE-2015-3166 (information disclosure)

The replacement implementation of snprintf() failed to check for errors
reported by the underlying system library calls; the main case that
might be missed is out-of-memory situations. In the worst case this
might lead to information disclosure.

  • CVE-2015-3167 (side-channel key exposure)

In contrib/pgcrypto, some cases of decryption with an incorrect key
could report other error message texts. Fix by using a one-size-fits-all
message.

OSVersionArchitecturePackageVersionFilename
anyanyanypostgresql< 9.4.2-1UNKNOWN