Security update for postgresql95 SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2018:0736-1 Final 1 1 2018-03-18T10:33:55Z current 2018-03-18T10:33:55Z 2018-03-18T10:33:55Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for postgresql95 This update for postgresql95 fixes the following issues: Security issue fixed in PostgreSQL 9.5.12: - CVE-2018-1058: Uncontrolled search path element in pg_dump and other client applications (boo#1081925). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2018-03/msg00068.html E-Mail link for openSUSE-SU-2018:0736-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.3 postgresql95-9.5.12-2.6.1 postgresql95-contrib-9.5.12-2.6.1 postgresql95-devel-9.5.12-2.6.1 postgresql95-docs-9.5.12-2.6.1 postgresql95-libs-9.5.12-2.6.1 postgresql95-plperl-9.5.12-2.6.1 postgresql95-plpython-9.5.12-2.6.1 postgresql95-pltcl-9.5.12-2.6.1 postgresql95-server-9.5.12-2.6.1 postgresql95-test-9.5.12-2.6.1 postgresql95-9.5.12-2.6.1 as a component of openSUSE Leap 42.3 postgresql95-contrib-9.5.12-2.6.1 as a component of openSUSE Leap 42.3 postgresql95-devel-9.5.12-2.6.1 as a component of openSUSE Leap 42.3 postgresql95-docs-9.5.12-2.6.1 as a component of openSUSE Leap 42.3 postgresql95-libs-9.5.12-2.6.1 as a component of openSUSE Leap 42.3 postgresql95-plperl-9.5.12-2.6.1 as a component of openSUSE Leap 42.3 postgresql95-plpython-9.5.12-2.6.1 as a component of openSUSE Leap 42.3 postgresql95-pltcl-9.5.12-2.6.1 as a component of openSUSE Leap 42.3 postgresql95-server-9.5.12-2.6.1 as a component of openSUSE Leap 42.3 postgresql95-test-9.5.12-2.6.1 as a component of openSUSE Leap 42.3 A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected. CVE-2018-1058 openSUSE Leap 42.3:postgresql95-9.5.12-2.6.1 openSUSE Leap 42.3:postgresql95-contrib-9.5.12-2.6.1 openSUSE Leap 42.3:postgresql95-devel-9.5.12-2.6.1 openSUSE Leap 42.3:postgresql95-docs-9.5.12-2.6.1 openSUSE Leap 42.3:postgresql95-libs-9.5.12-2.6.1 openSUSE Leap 42.3:postgresql95-plperl-9.5.12-2.6.1 openSUSE Leap 42.3:postgresql95-plpython-9.5.12-2.6.1 openSUSE Leap 42.3:postgresql95-pltcl-9.5.12-2.6.1 openSUSE Leap 42.3:postgresql95-server-9.5.12-2.6.1 openSUSE Leap 42.3:postgresql95-test-9.5.12-2.6.1 moderate Please Install the update. https://lists.opensuse.org/opensuse-updates/2018-03/msg00068.html https://www.suse.com/security/cve/CVE-2018-1058.html CVE-2018-1058 https://bugzilla.suse.com/1081925 SUSE Bug 1081925 https://bugzilla.suse.com/1175193 SUSE Bug 1175193 https://bugzilla.suse.com/1175194 SUSE Bug 1175194