Errata overview
Errata ID 146
Date 2017-08-30
Source package postgresql-9.4
Fixed in version 9.4.13-0+deb8u1
Description
This update addresses the following issues:
* In some authentication methods empty passwords were accepted
  (CVE-2017-7546)
* User mappings could leak data to unprivileged users (CVE-2017-7547)
* The lo_put() function ignored ACLs (CVE-2017-7548)
Additional notes
CVE ID CVE-2017-7546
CVE-2017-7547
CVE-2017-7548
UCS Bug number #45211