From d568552e131ea2c7ea7f32112237692071899e0b Mon Sep 17 00:00:00 2001 From: Lev Lamberov Date: Fri, 14 Feb 2020 10:15:25 +0500 Subject: [SECURITY] [DSA 4622-1] postgresql-9.6 security update --- english/security/2020/dsa-4622.data | 13 +++++++++++++ english/security/2020/dsa-4622.wml | 19 +++++++++++++++++++ 2 files changed, 32 insertions(+) create mode 100644 english/security/2020/dsa-4622.data create mode 100644 english/security/2020/dsa-4622.wml diff --git a/english/security/2020/dsa-4622.data b/english/security/2020/dsa-4622.data new file mode 100644 index 00000000000..d297743f917 --- /dev/null +++ b/english/security/2020/dsa-4622.data @@ -0,0 +1,13 @@ +DSA-4622-1 postgresql-9.6 +2020-2-13 +CVE-2020-1720 +postgresql-9.6 +yes +yes +no + +#use wml::debian::security + + + + diff --git a/english/security/2020/dsa-4622.wml b/english/security/2020/dsa-4622.wml new file mode 100644 index 00000000000..f04da75c226 --- /dev/null +++ b/english/security/2020/dsa-4622.wml @@ -0,0 +1,19 @@ +security update + +

Tom Lane discovered that ALTER ... DEPENDS ON EXTENSION sub commands +in the PostgreSQL database did not perform authorisation checks.

+ +

For the oldstable distribution (stretch), this problem has been fixed +in version 9.6.17-0+deb9u1.

+ +

We recommend that you upgrade your postgresql-9.6 packages.

+ +

For the detailed security status of postgresql-9.6 please refer to +its security tracker page at: +\ +https://security-tracker.debian.org/tracker/postgresql-9.6

+
+ +# do not modify the following line +#include "$(ENGLISHDIR)/security/2020/dsa-4622.data" +# $Id: $ -- cgit v1.2.3