MGASA-2015-0207
Updated postgis packages fix security vulnerabilities
Updated postgis packages fix security vulnerability:
The PostGIS Raster support in PostGIS before 2.1.3 may give more privileges to users than an administrator is willing to grant. These include reading files from the filesystem and opening connections to network hosts.
The postgis package has been updated to version 2.1.7, fixing this issue and several other bugs.
Please see the upstream release announcements and NEWS for more information.
What each source reports
OSV No score
Updated postgis packages fix security vulnerabilities
Updated postgis packages fix security vulnerability:
The PostGIS Raster support in PostGIS before 2.1.3 may give more privileges to users than an administrator is willing to grant. These include reading files from the filesystem and opening connections to network hosts.
The postgis package has been updated to version 2.1.7, fixing this issue and several other bugs.
Please see the upstream release announcements and NEWS for more information.
- Record
MGASA-2015-0207- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgisMageia:4 |
before 2.1.7-1.mga4 | 2.1.7-1.mga4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0207 is a vulnerability with no CVSS score yet in postgis, published May 11, 2015. No source lists public exploit code. Fixed in postgis 2.1.7-1.mga4.