SUSE-SU-2015:0639-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2015/suse-su-20150639-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0639-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2015:0639-1
Upstream
  • CVE-2014-8161
  • CVE-2015-0241
  • CVE-2015-0243
  • CVE-2015-0244
Related
  • CVE-2014-8161
  • CVE-2015-0241
  • CVE-2015-0243
  • CVE-2015-0244
Published
2015-03-02T17:37:06Z
Modified
2026-02-04T03:37:44Z
Summary
Security update for postgresql91
Details

The PostgreSQL database server was updated to 9.1.15, fixing bugs and security issues:

* Fix buffer overruns in to_char() (CVE-2015-0241).
* Fix buffer overrun in replacement *printf() functions
  (CVE-2015-0242).
* Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
* Fix possible loss of frontend/backend protocol synchronization after
  an error (CVE-2015-0244).
* Fix information leak via constraint-violation error messages
  (CVE-2014-8161).

For a comprehensive list of fixes, please refer to the following release notes:

* http://www.postgresql.org/docs/9.1/static/release-9-1-15.html
  <http://www.postgresql.org/docs/9.1/static/release-9-1-15.html>
* http://www.postgresql.org/docs/9.1/static/release-9-1-14.html
  <http://www.postgresql.org/docs/9.1/static/release-9-1-14.html>
* http://www.postgresql.org/docs/9.1/static/release-9-1-13.html
  <http://www.postgresql.org/docs/9.1/static/release-9-1-13.html>

Security Issues:

* CVE-2015-0241
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0241>
* CVE-2015-0243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0243>
* CVE-2015-0244
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0244>
* CVE-2014-8161
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8161>
References

Affected packages