FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

PostgreSQL vulnerabilities

Affected packages
9.2.0	<=	postgresql92-server	<	9.2.22
9.3.0	<=	postgresql93-server	<	9.3.18
9.4.0	<=	postgresql94-server	<	9.4.13
9.5.0	<=	postgresql95-server	<	9.5.8
9.6.0	<=	postgresql96-server	<	9.6.4

Details

VuXML ID	982872f1-7dd3-11e7-9736-6cc21735f730
Discovery	2017-08-10
Entry	2017-08-10

The PostgreSQL project reports:

CVE-2017-7546: Empty password accepted in some authentication methods

CVE-2017-7547: The "pg_user_mappings" catalog view discloses passwords to users lacking server privileges

CVE-2017-7548: lo_put() function ignores ACLs

[source]

References

CVE Name	CVE-2017-7546
CVE Name	CVE-2017-7547
CVE Name	CVE-2017-7548