Lucene search

K
suseSuseOPENSUSE-SU-2019:1773-1
HistoryJul 21, 2019 - 12:00 a.m.

Security update for postgresql10 (moderate)

2019-07-2100:00:00
lists.opensuse.org
157

EPSS

0.729

Percentile

98.1%

An update that fixes two vulnerabilities is now available.

Description:

This update for postgresql10 fixes the following issues:

Security issue fixed:

  • CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier
    parsing (bsc#1138034).
  • CVE-2019-10130: Prevent row-level security policies from being bypassed
    via selectivity estimators (bsc#1134689).

Bug fixes:

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.1:

    zypper in -t patch openSUSE-2019-1773=1

  • openSUSE Leap 15.0:

    zypper in -t patch openSUSE-2019-1773=1