Path to this page:
Subject: CVS commit: pkgsrc/databases
From: Adam Ciarcinski
Date: 2017-08-13 21:25:18
Message id: 20170813192518.E54B3FAD0@cvs.NetBSD.org
Log Message:
The PostgreSQL Global Development Group has released an update to all supported \
versions of our database system, including 9.6.4, 9.5.8, 9.4.13, 9.3.18, and \
9.2.22. This release fixes three security issues. It also patches over 50 other \
bugs reported over the last three months. Users who are affected by the below \
security issues should update as soon as possible. Users affected by \
CVE-2017-7547 will need to perform additional steps after upgrading to resolve \
the issue. Other users should plan to update at the next convenient downtime.
Three security vulnerabilities have been closed by this release:
* CVE-2017-7546: Empty password accepted in some authentication methods
* CVE-2017-7547: The "pg_user_mappings" catalog view discloses \
passwords to users lacking server privileges
* CVE-2017-7548: lo_put() function ignores ACLs
Files: