{"id":"CVE-2017-7547","aliases":["ALPINE-CVE-2017-7547","BELL-CVE-2017-7547","DLA-1051-1","DSA-3935-1","DSA-3936-1","EUVD-2017-16557","GHSA-gx5r-vvjw-c75c","MGASA-2017-0316","RHSA-2017:2677","RHSA-2017:2678","RHSA-2017:2728","SUSE-SU-2017:2236-1","SUSE-SU-2017:2258-1","SUSE-SU-2017:2355-1","SUSE-SU-2017:2356-1","UBUNTU-CVE-2017-7547","USN-3390-1"],"status":"published","title":"PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to...","description":"PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05581,"percentile":0.92936,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-522"],"published":"2017-08-10T00:00:00Z","modified":"2026-06-29T10:17:51Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"postgresql","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"postgresql","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"postgresql","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"postgresql","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"postgresql","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"postgresql","fixed_in":["9.4.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"postgresql","fixed_in":["9.5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"postgresql","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"postgresql","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"postgresql","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"postgresql","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"postgresql","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"postgresql14","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"postgresql14","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql14","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql14","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql15","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql15","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql15","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql15","fixed_in":["9.6.4-r0"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","fixed_in":["9.3.18-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"postgresql-9.5","fixed_in":["9.5.8-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-r0"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"postgresql-9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.24lts2-0+deb7u1"}]}],"versions":["9.1.10-0wheezy1","9.1.10-1","9.1.11-0wheezy1","9.1.11-1","9.1.11-1~bpo60+1","9.1.11-2","9.1.12-0wheezy1","9.1.12-0wheezy1~bpo60+1","9.1.12-1","9.1.13-0wheezy1","9.1.13-0wheezy1~bpo60+1","9.1.13-1","9.1.14-0+deb7u1","9.1.14-0wheezy1","9.1.15-0+deb7u1","9.1.15-0+deb7u1~bpo60+1","9.1.16-0+deb7u1","9.1.16-0+deb7u2","9.1.17-0+deb7u1","9.1.18-0+deb7u1","9.1.19-0+deb7u1","9.1.20-0+deb7u1","9.1.21-0+deb7u1","9.1.22-0+deb7u1","9.1.23-0+deb7u1","9.1.24-0+deb7u1","9.1.9-1","9.1.9-2","9.1.9-3","9.1.9-4","9.1.9-5"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"postgresql-9.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0+deb8u1"}]}],"versions":["9.4.1-1","9.4.10-0+deb8u1","9.4.11-0+deb8u1","9.4.11-0+deb8u1~bpo7+1","9.4.11-0+deb8u2","9.4.12-0+deb8u1","9.4.12-0+deb8u1~bpo7+1","9.4.2-0+deb8u1","9.4.2-1","9.4.3-0+deb8u1","9.4.3-1","9.4.4-0+deb8u1","9.4.4-1","9.4.4-2","9.4.5-0+deb8u1","9.4.5-0+deb8u1~bpo70+1","9.4.5-1","9.4.5-2","9.4.6-0+deb8u1","9.4.6-0+deb8u1~bpo70+1","9.4.7-0+deb8u1","9.4.7-0+deb8u1~bpo70+1","9.4.7-0+deb8u1~bpo70+2","9.4.8-0+deb8u1","9.4.9-0+deb8u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:9","package":"postgresql-9.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-0+deb9u1"}]}],"versions":["9.6.3-3","9.6.3-4"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"postgresql9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.18-1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"postgresql9.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:6","package":"postgresql9.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-1.mga6"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:6","package":"postgresql9.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-1.mga6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql95-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql95-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.9-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.14-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.23-1.el7_4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.18-25.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.18-25.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-0.23.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-21.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-21.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-21.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-21.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-21.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-21.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-21.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-21.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-21.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.13-21.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.4-3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.18-0ubuntu0.14.04.1"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04","9.3.7-0ubuntu0.14.04","9.3.8-0ubuntu0.4.04","9.3.9-0ubuntu0.14.04","9.3.10-0ubuntu0.14.04","9.3.11-0ubuntu0.14.04","9.3.12-0ubuntu0.14.04","9.3.13-0ubuntu0.14.04","9.3.14-0ubuntu0.14.04","9.3.15-0ubuntu0.14.04","9.3.16-0ubuntu0.14.04","9.3.17-0ubuntu0.14.04"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"postgresql-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.8-0ubuntu0.16.04.1"}]}],"versions":["9.5.0-1","9.5.0-2","9.5.0-3","9.5.1-1","9.5.2-1","9.5.3-0ubuntu0.16.04","9.5.4-0ubuntu0.16.04","9.5.5-0ubuntu0.16.04","9.5.6-0ubuntu0.16.04","9.5.7-0ubuntu0.16.04"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.18-0ubuntu0.14.04.1"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04","9.3.7-0ubuntu0.14.04","9.3.8-0ubuntu0.4.04","9.3.9-0ubuntu0.14.04","9.3.10-0ubuntu0.14.04","9.3.11-0ubuntu0.14.04","9.3.12-0ubuntu0.14.04","9.3.13-0ubuntu0.14.04","9.3.14-0ubuntu0.14.04","9.3.15-0ubuntu0.14.04","9.3.16-0ubuntu0.14.04","9.3.17-0ubuntu0.14.04"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"postgresql-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.8-0ubuntu0.16.04.1"}]}],"versions":["9.5.0-1","9.5.0-2","9.5.0-3","9.5.1-1","9.5.2-1","9.5.3-0ubuntu0.16.04","9.5.4-0ubuntu0.16.04","9.5.5-0ubuntu0.16.04","9.5.6-0ubuntu0.16.04","9.5.7-0ubuntu0.16.04"],"bundled":3}],"products":[{"vendor":"postgresql","product":"postgresql"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:2728","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3936","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2678","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3935","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id/1039142","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.postgresql.org/about/news/1772/","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory","advisory","web","article","report"]},{"url":"https://security.gentoo.org/glsa/201710-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/100275","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2677","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7547","tags":["advisory"]},{"url":"https://www.postgresql.org/about/news/1772"},{"url":"https://github.com/advisories/GHSA-gx5r-vvjw-c75c"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-7547","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-7547","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0316.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21496","tags":["report"]},{"url":"http://www.postgresql.org/docs/current/static/release-9-3-18.html","tags":["web"]},{"url":"http://www.postgresql.org/docs/current/static/release-9-4-13.html","tags":["web"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-6-4.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-5-8.html","tags":["article"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-5-9.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1477184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1477185","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1477187","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2677.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7546","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7547","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7548","tags":["advisory"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-4-13.html","tags":["article"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-4-14.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2678.json","tags":["advisory"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-2-22.html","tags":["article"]},{"url":"https://www.postgresql.org/docs/current/static/release-9-2-23.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2728.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172236-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1051684","tags":["report"]},{"url":"https://bugzilla.suse.com/1051685","tags":["report"]},{"url":"https://bugzilla.suse.com/1053259","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7548","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172258-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172355-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172356-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-7547","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3390-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-7546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7548","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-7547","description":"PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.","status":"published","published":"2017-08-16T18:00:00Z","modified":"2024-09-16T23:41:38.65Z","cwes":["CWE-522"],"updated_at":"2026-11-02T14:33:20.488433Z"}],"euvd":[{"id":"EUVD-2017-16557","description":"PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.","status":"published","published":"2017-08-16T18:00:00Z","modified":"2024-09-16T23:41:38Z","updated_at":"2026-11-03T00:54:48.177577Z"}],"ghsa":[{"id":"GHSA-gx5r-vvjw-c75c","title":"PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to...","description":"PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.","status":"published","published":"2022-05-13T01:47:01Z","modified":"2025-04-20T03:44:13Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T15:01:51.143792Z"}],"nvd":[{"id":"CVE-2017-7547","description":"PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.","status":"published","published":"2017-08-16T18:29:00.257Z","modified":"2026-06-17T01:24:35.06Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:03:57.82609Z"}],"osv":[{"id":"ALPINE-CVE-2017-7547","description":"PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.","status":"published","published":"2017-08-16T18:29:00.257Z","modified":"2026-06-15T18:24:49.488956187Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"BELL-CVE-2017-7547","title":"CVE-2017-7547 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:34.53969Z","modified":"2026-01-26T09:47:04.442022Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-7547","description":"PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.","status":"published","published":"2017-08-16T18:29:00.257Z","modified":"2026-04-16T06:15:19.477953821Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.412595Z"},{"id":"RHSA-2017:2677","title":"Red Hat Security Advisory: rh-postgresql95-postgresql security update","status":"published","published":"2024-09-13T16:49:35Z","modified":"2026-06-29T10:17:39Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2678","title":"Red Hat Security Advisory: rh-postgresql94-postgresql security update","status":"published","published":"2024-09-13T16:49:43Z","modified":"2026-06-29T10:17:40Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2728","title":"Red Hat Security Advisory: postgresql security update","status":"published","published":"2024-09-13T16:49:26Z","modified":"2026-06-29T10:17:51Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-7547","description":"PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.","status":"published","published":"2017-08-10T00:00:00Z","modified":"2026-04-22T11:31:03.102238Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:15.773974Z"},{"id":"DLA-1051-1","title":"postgresql-9.1 - security update","status":"published","published":"2017-08-10T00:00:00Z","modified":"2026-03-09T01:01:46.515738Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3935-1","title":"postgresql-9.4 - security update","status":"published","published":"2017-08-10T00:00:00Z","modified":"2026-03-09T01:21:44.280521Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"DSA-3936-1","title":"postgresql-9.6 - security update","status":"published","published":"2017-08-10T00:00:00Z","modified":"2026-03-09T02:09:38.002232Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0316","title":"Updated postgresql9.3/4/6 packages fix security vulnerabilities","description":"libpq, and by extension any connection driver that utilizes libpq,\nignores empty passwords and does not transmit them to the server. When\nusing libpq or a libpq-based connection driver to perform password-based\nauthentication methods, it would appear that setting an empty password\nwould be the equivalent of disabling password login. However, using a\nnon-libpq based connection driver could allow a client with an empty\npassword to log in (CVE-2017-7546).\n\nA user had access to see the options in pg_user_mappings even if the\nuser did not have the USAGE permission on the associated foreign server.\nThis meant that a user could see details such as a password that might\nhave been set by the server administrator rather than the user\n(CVE-2017-7547).\n\nThe lo_put() function should require the same permissions as lowrite(),\nbut there was a missing permission check which would allow any user to\nchange the data in a large object (CVE-2017-7548).\n\nNote: the CVE-2017-7547 issue requires manual intervention to fix on\naffected systems.  See the references for details.\n","status":"published","published":"2017-08-28T08:14:39Z","modified":"2026-04-16T06:26:19.835109363Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2017:2236-1","title":"Security update for postgresql93","description":"Postgresql93 was updated to 9.3.18 to fix the following issues:\n\n* CVE-2017-7547: Further restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1051685)\n* CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. (bsc#1051684)\n* CVE-2017-7548: lo_put() function ignores ACLs. (bsc#1053259)\n\nThe changelog for the release is here:\n\n\thttps://www.postgresql.org/docs/9.3/static/release-9-3-18.html\n\n","status":"published","published":"2017-08-22T15:34:20Z","modified":"2026-02-04T04:36:08.168735Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2258-1","title":"Security update for postgresql94","description":"Postgresql94 was updated to 9.4.13 to fix the following issues:\n\n* CVE-2017-7547: Further restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1051685)\n* CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. (bsc#1051684)\n* CVE-2017-7548: lo_put() function ignores ACLs. (bsc#1053259)\n\nThe changelog for this release is here:\n\thttps://www.postgresql.org/docs/9.4/static/release-9-4-13.html\n\n","status":"published","published":"2017-08-25T13:17:12Z","modified":"2026-02-04T04:30:49.613033Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2355-1","title":"Security update for postgresql94","description":"This update for postgresql94 fixes the following issues:\n\n* CVE-2017-7547: Further restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1051685)\n* CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. (bsc#1051684)\n* CVE-2017-7548: lo_put() function ignores ACLs. (bsc#1053259)\n\n","status":"published","published":"2017-09-05T13:46:28Z","modified":"2026-02-04T02:35:30.634678Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:2356-1","title":"Security update for postgresql96","description":"This update for postgresql96 fixes the following issues:\n\n* CVE-2017-7547: Further restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1051685)\n* CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. (bsc#1051684)\n* CVE-2017-7548: lo_put() function ignores ACLs. (bsc#1053259)\n\nThe changelog for this release is here:\n\thttps://www.postgresql.org/docs/9.6/static/release-9-6-4.html\n\n","status":"published","published":"2017-09-05T15:32:49Z","modified":"2026-02-04T03:21:39.74484Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-3390-1","title":"postgresql-9.3, postgresql-9.5, postgresql-9.6 vulnerabilities","description":"Ben de Graaff, Jelte Fennema, and Jeroen van der Ham discovered that\nPostgreSQL allowed the use of empty passwords in some authentication\nmethods, contrary to expected behaviour. A remote attacker could use an\nempty password to authenticate to servers that were believed to have\npassword login disabled. (CVE-2017-7546)\n\nJeff Janes discovered that PostgreSQL incorrectly handled the\npg_user_mappings catalog view. A remote attacker without server privileges\ncould possibly use this issue to obtain certain passwords. (CVE-2017-7547)\n\nChapman Flack discovered that PostgreSQL incorrectly handled lo_put()\npermissions. A remote attacker could possibly use this issue to change the\ndata in a large object. (CVE-2017-7548)\n","status":"published","published":"2017-08-15T16:56:34Z","modified":"2026-04-22T09:38:45.248505Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}