Security update for postgresql94
This update for postgresql94 fixes the following issues:
Security issues fixed:
- CVE-2017-15098: Fix crash due to rowtype mismatch in json{b}_populate_recordset() (bsc#1067844).
- CVE-2017-12172: Start scripts permit database administrator to modify root-owned files. This issue did not affect SUSE (bsc#1062538).
Bug fixes:
- Update to version 9.4.15
* https://www.postgresql.org/docs/9.4/static/release-9-4-15.html
* https://www.postgresql.org/docs/9.4/static/release-9-4-14.html
This update was imported from the SUSE:SLE-12:Update update project.
-
Submitted by
Reinhard Max (rmax)
Fixed bugs
bnc#1067844
VUL-0: CVE-2017-15098: postgresql94,postgresql96: Memory disclosure in JSON functions
bnc#1062538
VUL-0: CVE-2017-12172: postgresql: Start scripts permit database administrator to modify root-owned files
