CVE-2015-0243

These are all security issues fixed in the postgresql93-9.3.15-1.1 package on the GA media of openSUSE Tumbleweed.

postgresql93 was updated to version 9.3.6 to fix four security issues.

These security issues were fixed:

• CVE-2015-0241: Fix buffer overruns in to_char() (bnc#916953).
• CVE-2015-0243: Fix buffer overruns in contrib/pgcrypto (bnc#916953).
• CVE-2015-0244: Fix possible loss of frontend/backend protocol synchronization after an error (bnc#916953).
• CVE-2014-8161: Fix information leak via constraint-violation error messages (bnc#916953).

This non-security issue was fixed:

• Move the server socket from /tmp to /var/run to avoid problems with clients that use PrivateTmp (bnc#888564).

More information is available at http://www.postgresql.org/docs/9.3/static/release-9-3-6.html

The PostgreSQL database server was updated to 9.1.15, fixing bugs and security issues:

* Fix buffer overruns in to_char() (CVE-2015-0241).
* Fix buffer overrun in replacement *printf() functions
  (CVE-2015-0242).
* Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
* Fix possible loss of frontend/backend protocol synchronization after
  an error (CVE-2015-0244).
* Fix information leak via constraint-violation error messages
  (CVE-2014-8161).

For a comprehensive list of fixes, please refer to the following release notes:

* http://www.postgresql.org/docs/9.1/static/release-9-1-15.html
  <http://www.postgresql.org/docs/9.1/static/release-9-1-15.html>
* http://www.postgresql.org/docs/9.1/static/release-9-1-14.html
  <http://www.postgresql.org/docs/9.1/static/release-9-1-14.html>
* http://www.postgresql.org/docs/9.1/static/release-9-1-13.html
  <http://www.postgresql.org/docs/9.1/static/release-9-1-13.html>

Security Issues:

* CVE-2015-0241
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0241>
* CVE-2015-0243
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0243>
* CVE-2015-0244
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0244>
* CVE-2014-8161
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8161>

Stephen Frost discovered that PostgreSQL incorrectly displayed certain values in error messages. An authenticated user could gain access to seeing certain values, contrary to expected permissions. (CVE-2014-8161)

Andres Freund, Peter Geoghegan and Noah Misch discovered that PostgreSQL incorrectly handled buffers in to_char functions. An authenticated attacker could possibly use this issue to cause PostgreSQL to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2015-0241)

It was discovered that PostgreSQL incorrectly handled memory in the pgcrypto extension. An authenticated attacker could possibly use this issue to cause PostgreSQL to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2015-0243)

Emil Lenngren discovered that PostgreSQL incorrectly handled extended protocol message reading. An authenticated attacker could possibly use this issue to cause PostgreSQL to crash, resulting in a denial of service, or possibly inject query messages. (CVE-2015-0244)