[SECURITY] [DLA 2331-1] posgresql-9.6 security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2331-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
August 17, 2020 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : posgresql-9.6
Version : 9.6.19-0+deb9u1
CVE ID : CVE-2020-14350
Andres Freund found an issue in the PostgreSQL database system where an
uncontrolled search path could allow users to run arbitrary SQL functions
with elevated priviledges when a superuser runs certain `CREATE EXTENSION'
statements.
For Debian 9 stretch, this problem has been fixed in version
9.6.19-0+deb9u1.
We recommend that you upgrade your posgresql-9.6 packages.
For the detailed security status of posgresql-9.6 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/posgresql-9.6
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAl86PpgACgkQnUbEiOQ2
gwLFKw//VEzyGXBuKDJcQ5pWfHVskp6kHawBfVStLoxtkHblW8GCmctppxYFbQcy
AwgFdsh3zJtlRTbNwfyhVx5x/i/vxoQa2yyOXrBDZNSoiLCJNra7bGrdGqA3SfSf
R76D6bmk1yEACnlA22ig8XiykrpBvAELr/OEx7TUKFZsL2QzkASFBf2ioBYb+Rp2
4cpxDoGNYWglBjCPhUXKD/6gJhYNRAjPX5qk0C4kX7MreYOaHO2WPdfRtjElfWY0
OWiEjb6Dv3DsgJ79neP844wbbLVHFReqHAzR9Pa0GglwoJE7Pn+l1tjeEoMZ4D0A
zTKcotoCdQNCxvCCDtjODDf2Kn1FpcVM9h8ytncfk97JL9wkjPrMRgrocelOOjyG
wtutMg2xvOjtDRBNYPSppylPp/n7euLySpZ3wI5xekQ01o0JtKQGzD7S1+JSZRW3
St7v98fySJWk/bpHs/JX0j+Bd277wWaIzwKEFLuN0Mz7BgEm28bAz+JLoArHLJYl
dMiyD7bKy80jbedQNkjztjDteAZfPuJPOymP2ljyL2r+/cZyrBpm/iZp939NyPY/
OP9Hp4R03QQgEWsnm0wcYqYiBWBmwtH9vNdz0gEVS49/2D9Wia2fM2zKiuYJ+ZxK
smgbz9euQHaZ2N6zyKYu69sO3dBF7rOZZmKGq2MdzUGYQ3mOhTc=
=6oiN
-----END PGP SIGNATURE-----
Reply to: