Author: renodr
Date: Thu Aug 13 22:53:20 2020
New Revision: 1607
Log:
Errata: add errata for PostgreSQL vulnerabilities.
Modified:
html/trunk/blfs/errata/9.1-systemd/index.html
html/trunk/blfs/errata/9.1/index.html
Modified: html/trunk/blfs/errata/9.1-systemd/index.html
==============================================================================
--- html/trunk/blfs/errata/9.1-systemd/index.html Thu Aug 13 17:33:01
2020 (r1606)
+++ html/trunk/blfs/errata/9.1-systemd/index.html Thu Aug 13 22:53:20
2020 (r1607)
@@ -306,6 +306,11 @@
xorg-server that leads to uninitialized memory disclosure. To
fix this vulnerability, apply the following sed to your build:
"sed -i 's/malloc(pScreen/calloc(1, pScreen/' dix/pixmap.c".</li>
+ <li>After release, two security vulnerabilities were discovered in the
+ PostgreSQL database server. These two vulnerabilities have to do with
+ uncontrolled search path elements. To fix these vulnerabilities,
+ update to PostgreSQL-12.4 or later using the instructions in
+ <a
href="../../view/systemd/server/postgresql.html">PostgreSQL-12.4</a>.</li>
</ul>
Modified: html/trunk/blfs/errata/9.1/index.html
==============================================================================
--- html/trunk/blfs/errata/9.1/index.html Thu Aug 13 17:33:01 2020
(r1606)
+++ html/trunk/blfs/errata/9.1/index.html Thu Aug 13 22:53:20 2020
(r1607)
@@ -305,6 +305,11 @@
xorg-server that leads to uninitialized memory disclosure. To
fix this vulnerability, apply the following sed to your build:
"sed -i 's/malloc(pScreen/calloc(1, pScreen/' dix/pixmap.c".</li>
+ <li>After release, two security vulnerabilities were discovered in the
+ PostgreSQL database server. These two vulnerabilities have to do with
+ uncontrolled search path elements. To fix these vulnerabilities,
+ update to PostgreSQL-12.4 or later using the instructions in
+ <a
href="../../view/svn/server/postgresql.html">PostgreSQL-12.4</a>.</li>
</ul>
<!--#include virtual="/common/footer.html" -->
--
http://lists.linuxfromscratch.org/listinfo/website
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
