PT-2015-7904 · Postgis · Postgis

Publicado 2015-05-11 · Atualizado 2015-05-11

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions PostGIS versions prior to 2.1.3 PostGIS version 2.1.7

Description The PostGIS Raster support in PostGIS may give more privileges to users than an administrator is willing to grant, including reading files from the filesystem and opening connections to network hosts.

Recommendations For PostGIS versions prior to 2.1.3, update to version 2.1.7 to fix the issue. For PostGIS version 2.1.7, no further action is required as this version fixes the issue.

Identificadores relacionados

MGASA-2015-0207

Produtos afetados

Postgis

Referências · 12

• http://postgis.net/2014/09/10/postgis-2.1.4 · Nota
• http://postgis.net/2013/11/08/postgis-2.1.1 · Nota
• https://lists.fedoraproject.org/pipermail/package-announce/2015-April/154704.html · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=15741 · Nota
• http://svn.osgeo.org/postgis/tags/2.1.7/NEWS · Nota
• https://advisories.mageia.org/MGASA-2015-0207.html · Nota de Segurança
• http://postgis.net/2014/03/31/postgis-2.1.2 · Nota
• http://postgis.net/2014/05/19/postgis-2.0.6_and_2.1.3 · Nota
• http://postgis.net/2014/12/18/postgis-2.1.5 · Nota
• http://postgis.net/2015/04/06/postgis-2.1.7 · Nota
• http://postgis.net/2015/03/20/postgis-2.1.6 · Nota
• https://osv.dev/vulnerability/MGASA-2015-0207 · Aviso do Fabricante