Errata overview
Errata ID 190
Date 2018-08-15
Source package postgresql-9.6
Fixed in version 9.6.10-0+deb9u1
Description
This update addresses the following issues:
* Uncontrolled search path element in pg_dump and other client applications
  (CVE-2018-1058)
* Too-permissive access control list on function pg_logfile_rotate()
  (CVE-2018-1115)
* Certain host connection parameters defeat client-side security defenses
  (CVE-2018-10915)
* Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO
  UPDATE statements (CVE-2018-10925)
Additional notes
CVE ID CVE-2018-1058
CVE-2018-1115
CVE-2018-10915
CVE-2018-10925
UCS Bug number #47482