<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for postgresql93</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2017:2306-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2017-08-30T21:18:04Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2017-08-30T21:18:04Z</InitialReleaseDate>
    <CurrentReleaseDate>2017-08-30T21:18:04Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for postgresql93</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">Postgresql93 was updated to 9.3.18 to fix the following issues:

* CVE-2017-7547: Further restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1051685)
* CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. (bsc#1051684)
* CVE-2017-7548: lo_put() function ignores ACLs. (bsc#1053259)

The changelog for the release is here:

	https://www.postgresql.org/docs/9.3/static/release-9-3-18.html

This update was imported from the SUSE:SLE-12:Update update project.</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00076.html</URL>
      <Description>E-Mail link for openSUSE-SU-2017:2306-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="openSUSE Leap 42.2">
      <Branch Type="Product Name" Name="openSUSE Leap 42.2">
        <FullProductName ProductID="openSUSE Leap 42.2">openSUSE Leap 42.2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 42.3">
      <Branch Type="Product Name" Name="openSUSE Leap 42.3">
        <FullProductName ProductID="openSUSE Leap 42.3">openSUSE Leap 42.3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="postgresql93-9.3.18-8.1">
      <FullProductName ProductID="postgresql93-9.3.18-8.1">postgresql93-9.3.18-8.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql93-contrib-9.3.18-8.1">
      <FullProductName ProductID="postgresql93-contrib-9.3.18-8.1">postgresql93-contrib-9.3.18-8.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql93-devel-9.3.18-8.1">
      <FullProductName ProductID="postgresql93-devel-9.3.18-8.1">postgresql93-devel-9.3.18-8.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql93-docs-9.3.18-8.1">
      <FullProductName ProductID="postgresql93-docs-9.3.18-8.1">postgresql93-docs-9.3.18-8.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql93-libs-9.3.18-8.1">
      <FullProductName ProductID="postgresql93-libs-9.3.18-8.1">postgresql93-libs-9.3.18-8.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql93-plperl-9.3.18-8.1">
      <FullProductName ProductID="postgresql93-plperl-9.3.18-8.1">postgresql93-plperl-9.3.18-8.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql93-plpython-9.3.18-8.1">
      <FullProductName ProductID="postgresql93-plpython-9.3.18-8.1">postgresql93-plpython-9.3.18-8.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql93-pltcl-9.3.18-8.1">
      <FullProductName ProductID="postgresql93-pltcl-9.3.18-8.1">postgresql93-pltcl-9.3.18-8.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql93-server-9.3.18-8.1">
      <FullProductName ProductID="postgresql93-server-9.3.18-8.1">postgresql93-server-9.3.18-8.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="postgresql93-test-9.3.18-8.1">
      <FullProductName ProductID="postgresql93-test-9.3.18-8.1">postgresql93-test-9.3.18-8.1</FullProductName>
    </Branch>
    <Relationship ProductReference="postgresql93-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:postgresql93-9.3.18-8.1">postgresql93-9.3.18-8.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-contrib-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:postgresql93-contrib-9.3.18-8.1">postgresql93-contrib-9.3.18-8.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-devel-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:postgresql93-devel-9.3.18-8.1">postgresql93-devel-9.3.18-8.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-docs-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:postgresql93-docs-9.3.18-8.1">postgresql93-docs-9.3.18-8.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-libs-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:postgresql93-libs-9.3.18-8.1">postgresql93-libs-9.3.18-8.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-plperl-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:postgresql93-plperl-9.3.18-8.1">postgresql93-plperl-9.3.18-8.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-plpython-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:postgresql93-plpython-9.3.18-8.1">postgresql93-plpython-9.3.18-8.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-pltcl-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:postgresql93-pltcl-9.3.18-8.1">postgresql93-pltcl-9.3.18-8.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-server-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:postgresql93-server-9.3.18-8.1">postgresql93-server-9.3.18-8.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-test-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.2">
      <FullProductName ProductID="openSUSE Leap 42.2:postgresql93-test-9.3.18-8.1">postgresql93-test-9.3.18-8.1 as a component of openSUSE Leap 42.2</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.3">
      <FullProductName ProductID="openSUSE Leap 42.3:postgresql93-9.3.18-8.1">postgresql93-9.3.18-8.1 as a component of openSUSE Leap 42.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-contrib-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.3">
      <FullProductName ProductID="openSUSE Leap 42.3:postgresql93-contrib-9.3.18-8.1">postgresql93-contrib-9.3.18-8.1 as a component of openSUSE Leap 42.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-devel-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.3">
      <FullProductName ProductID="openSUSE Leap 42.3:postgresql93-devel-9.3.18-8.1">postgresql93-devel-9.3.18-8.1 as a component of openSUSE Leap 42.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-docs-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.3">
      <FullProductName ProductID="openSUSE Leap 42.3:postgresql93-docs-9.3.18-8.1">postgresql93-docs-9.3.18-8.1 as a component of openSUSE Leap 42.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-libs-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.3">
      <FullProductName ProductID="openSUSE Leap 42.3:postgresql93-libs-9.3.18-8.1">postgresql93-libs-9.3.18-8.1 as a component of openSUSE Leap 42.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-plperl-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.3">
      <FullProductName ProductID="openSUSE Leap 42.3:postgresql93-plperl-9.3.18-8.1">postgresql93-plperl-9.3.18-8.1 as a component of openSUSE Leap 42.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-plpython-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.3">
      <FullProductName ProductID="openSUSE Leap 42.3:postgresql93-plpython-9.3.18-8.1">postgresql93-plpython-9.3.18-8.1 as a component of openSUSE Leap 42.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-pltcl-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.3">
      <FullProductName ProductID="openSUSE Leap 42.3:postgresql93-pltcl-9.3.18-8.1">postgresql93-pltcl-9.3.18-8.1 as a component of openSUSE Leap 42.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-server-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.3">
      <FullProductName ProductID="openSUSE Leap 42.3:postgresql93-server-9.3.18-8.1">postgresql93-server-9.3.18-8.1 as a component of openSUSE Leap 42.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="postgresql93-test-9.3.18-8.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.3">
      <FullProductName ProductID="openSUSE Leap 42.3:postgresql93-test-9.3.18-8.1">postgresql93-test-9.3.18-8.1 as a component of openSUSE Leap 42.3</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.</Note>
    </Notes>
    <CVE>CVE-2017-7546</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.2:postgresql93-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-contrib-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-devel-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-docs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-libs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-plperl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-plpython-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-pltcl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-server-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-test-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-contrib-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-devel-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-docs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-libs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-plperl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-plpython-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-pltcl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-server-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-test-9.3.18-8.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.4</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:P/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00076.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-7546.html</URL>
        <Description>CVE-2017-7546</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1051684</URL>
        <Description>SUSE Bug 1051684</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1054365</URL>
        <Description>SUSE Bug 1054365</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1140876</URL>
        <Description>SUSE Bug 1140876</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.</Note>
    </Notes>
    <CVE>CVE-2017-7547</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.2:postgresql93-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-contrib-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-devel-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-docs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-libs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-plperl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-plpython-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-pltcl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-server-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-test-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-contrib-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-devel-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-docs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-libs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-plperl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-plpython-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-pltcl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-server-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-test-9.3.18-8.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:S/C:P/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.4</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00076.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-7547.html</URL>
        <Description>CVE-2017-7547</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1051685</URL>
        <Description>SUSE Bug 1051685</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1054365</URL>
        <Description>SUSE Bug 1054365</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1140876</URL>
        <Description>SUSE Bug 1140876</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.</Note>
    </Notes>
    <CVE>CVE-2017-7548</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.2:postgresql93-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-contrib-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-devel-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-docs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-libs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-plperl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-plpython-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-pltcl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-server-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.2:postgresql93-test-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-contrib-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-devel-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-docs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-libs-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-plperl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-plpython-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-pltcl-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-server-9.3.18-8.1</ProductID>
        <ProductID>openSUSE Leap 42.3:postgresql93-test-9.3.18-8.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>8.5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:C/I:C/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>8.1</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00076.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-7548.html</URL>
        <Description>CVE-2017-7548</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1053259</URL>
        <Description>SUSE Bug 1053259</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1054365</URL>
        <Description>SUSE Bug 1054365</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1140876</URL>
        <Description>SUSE Bug 1140876</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
