-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2331-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 17, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------
Package : posgresql-9.6 Version : 9.6.19-0+deb9u1 CVE ID : CVE-2020-14350 Andres Freund found an issue in the PostgreSQL database system where an uncontrolled search path could allow users to run arbitrary SQL functions with elevated priviledges when a superuser runs certain `CREATE EXTENSION' statements. For Debian 9 stretch, this problem has been fixed in version 9.6.19-0+deb9u1. We recommend that you upgrade your posgresql-9.6 packages. For the detailed security status of posgresql-9.6 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/posgresql-9.6 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAl86PpgACgkQnUbEiOQ2 gwLFKw//VEzyGXBuKDJcQ5pWfHVskp6kHawBfVStLoxtkHblW8GCmctppxYFbQcy AwgFdsh3zJtlRTbNwfyhVx5x/i/vxoQa2yyOXrBDZNSoiLCJNra7bGrdGqA3SfSf R76D6bmk1yEACnlA22ig8XiykrpBvAELr/OEx7TUKFZsL2QzkASFBf2ioBYb+Rp2 4cpxDoGNYWglBjCPhUXKD/6gJhYNRAjPX5qk0C4kX7MreYOaHO2WPdfRtjElfWY0 OWiEjb6Dv3DsgJ79neP844wbbLVHFReqHAzR9Pa0GglwoJE7Pn+l1tjeEoMZ4D0A zTKcotoCdQNCxvCCDtjODDf2Kn1FpcVM9h8ytncfk97JL9wkjPrMRgrocelOOjyG wtutMg2xvOjtDRBNYPSppylPp/n7euLySpZ3wI5xekQ01o0JtKQGzD7S1+JSZRW3 St7v98fySJWk/bpHs/JX0j+Bd277wWaIzwKEFLuN0Mz7BgEm28bAz+JLoArHLJYl dMiyD7bKy80jbedQNkjztjDteAZfPuJPOymP2ljyL2r+/cZyrBpm/iZp939NyPY/ OP9Hp4R03QQgEWsnm0wcYqYiBWBmwtH9vNdz0gEVS49/2D9Wia2fM2zKiuYJ+ZxK smgbz9euQHaZ2N6zyKYu69sO3dBF7rOZZmKGq2MdzUGYQ3mOhTc= =6oiN -----END PGP SIGNATURE-----
