CVE-2012-3488 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2012-3488 Interim 1 31 2025-03-25T01:52:59Z current 2021-05-30T13:05:08Z 2025-03-25T01:52:59Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2012-3488 The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2012-August/000221.html E-Mail link for SUSE-SU-2012:1021-1 https://lists.suse.com/pipermail/sle-security-updates/2012-October/000277.html E-Mail link for SUSE-SU-2012:1336-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 openSUSE Leap 15.0 openSUSE Tumbleweed libecpg6-10.10-1.15.1 libecpg6-10.5-1.3.1 libecpg6-32bit-9.5.4-1.2 libecpg6-9.1.9-0.3.1 libecpg6-9.3.5-2.3 libecpg6-9.4.4-0.6.2 libecpg6-9.4.5-4.1 libecpg6-9.4.9-14.1 libecpg6-9.5.4-1.2 libecpg6-9.6.3-2.1 libpq5-10.10-1.15.1 libpq5-10.5-1.3.1 libpq5-32bit-10.10-1.15.1 libpq5-32bit-10.5-1.3.1 libpq5-32bit-9.1.9-0.3.1 libpq5-32bit-9.3.5-2.3 libpq5-32bit-9.4.4-0.6.2 libpq5-32bit-9.4.5-4.1 libpq5-32bit-9.4.9-14.1 libpq5-32bit-9.5.4-1.2 libpq5-32bit-9.6.3-2.1 libpq5-9.1.9-0.3.1 libpq5-9.3.5-2.3 libpq5-9.4.4-0.6.2 libpq5-9.4.5-4.1 libpq5-9.4.9-14.1 libpq5-9.5.4-1.2 libpq5-9.6.3-2.1 postgresql-8.3.20-0.4.1 postgresql-8.3.23-0.4.1 postgresql-contrib-8.3.20-0.4.1 postgresql-contrib-8.3.23-0.4.1 postgresql-devel-8.3.23-0.4.1 postgresql-docs-8.3.20-0.4.1 postgresql-docs-8.3.23-0.4.1 postgresql-init-9.1-0.6.10.1 postgresql-libs-32bit-8.3.18-0.3.1 postgresql-libs-8.3.18-0.3.1 postgresql-server-8.3.20-0.4.1 postgresql-server-8.3.23-0.4.1 postgresql10 postgresql10-10.10-1.15.1 postgresql10-10.5-1.3.2 postgresql10-contrib-10.10-1.15.1 postgresql10-contrib-10.5-1.3.2 postgresql10-devel-10.10-1.15.1 postgresql10-devel-10.5-1.3.1 postgresql10-docs-10.10-1.15.1 postgresql10-docs-10.5-1.3.2 postgresql10-plperl-10.10-1.15.1 postgresql10-plpython-10.10-1.15.1 postgresql10-pltcl-10.10-1.15.1 postgresql10-server-10.10-1.15.1 postgresql10-server-10.5-1.3.2 postgresql91-9.1.9-0.3.1 postgresql91-contrib-9.1.9-0.3.1 postgresql91-docs-9.1.9-0.3.1 postgresql91-server-9.1.9-0.3.1 postgresql93-9.3.15-1.1 postgresql93-9.3.5-2.24 postgresql93-contrib-9.3.15-1.1 postgresql93-contrib-9.3.5-2.24 postgresql93-devel-9.3.15-1.1 postgresql93-devel-9.3.5-2.3 postgresql93-docs-9.3.15-1.1 postgresql93-docs-9.3.5-2.24 postgresql93-plperl-9.3.15-1.1 postgresql93-plpython-9.3.15-1.1 postgresql93-pltcl-9.3.15-1.1 postgresql93-server-9.3.15-1.1 postgresql93-server-9.3.5-2.24 postgresql93-test-9.3.15-1.1 postgresql94 postgresql94-9.4.10-1.1 postgresql94-9.4.4-0.6.2 postgresql94-9.4.5-4.5 postgresql94-9.4.9-14.1 postgresql94-contrib-9.4.10-1.1 postgresql94-contrib-9.4.4-0.6.2 postgresql94-contrib-9.4.5-4.5 postgresql94-contrib-9.4.9-14.1 postgresql94-devel-9.4.10-1.1 postgresql94-devel-9.4.4-0.6.2 postgresql94-devel-9.4.5-4.1 postgresql94-devel-9.4.9-14.1 postgresql94-docs-9.4.10-1.1 postgresql94-docs-9.4.4-0.6.2 postgresql94-docs-9.4.5-4.5 postgresql94-docs-9.4.9-14.1 postgresql94-plperl-9.4.10-1.1 postgresql94-plpython-9.4.10-1.1 postgresql94-pltcl-9.4.10-1.1 postgresql94-server-9.4.10-1.1 postgresql94-server-9.4.4-0.6.2 postgresql94-server-9.4.5-4.5 postgresql94-server-9.4.9-14.1 postgresql94-test-9.4.10-1.1 postgresql95-9.5.4-1.2 postgresql95-contrib-9.5.4-1.2 postgresql95-devel-9.5.4-1.2 postgresql95-docs-9.5.4-1.2 postgresql95-plperl-9.5.4-1.2 postgresql95-plpython-9.5.4-1.2 postgresql95-pltcl-9.5.4-1.2 postgresql95-server-9.5.4-1.2 postgresql95-test-9.5.4-1.2 postgresql96-9.6.3-2.4 postgresql96-9.6.8-lp150.1.2 postgresql96-contrib-9.6.3-2.4 postgresql96-devel-9.6.3-2.1 postgresql96-docs-9.6.3-2.4 postgresql96-server-9.6.3-2.4 postgresql96-server-9.6.8-lp150.1.2 libecpg6-9.3.5-2.3 as a component of SUSE Linux Enterprise Desktop 12 libpq5-9.3.5-2.3 as a component of SUSE Linux Enterprise Desktop 12 libpq5-32bit-9.3.5-2.3 as a component of SUSE Linux Enterprise Desktop 12 postgresql93-9.3.5-2.24 as a component of SUSE Linux Enterprise Desktop 12 libecpg6-9.4.5-4.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libpq5-9.4.5-4.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libpq5-32bit-9.4.5-4.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 postgresql94-9.4.5-4.5 as a component of SUSE Linux Enterprise Desktop 12 SP1 libecpg6-9.4.9-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libpq5-9.4.9-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libpq5-32bit-9.4.9-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 postgresql94-9.4.9-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libecpg6-9.6.3-2.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpq5-9.6.3-2.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpq5-32bit-9.6.3-2.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 postgresql96-9.6.3-2.4 as a component of SUSE Linux Enterprise Desktop 12 SP3 libecpg6-10.5-1.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libpq5-10.5-1.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libpq5-32bit-10.5-1.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 postgresql10-10.5-1.3.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libecpg6-10.10-1.15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libpq5-10.10-1.15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libpq5-32bit-10.10-1.15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 postgresql10-10.10-1.15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 postgresql10-contrib-10.10-1.15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 postgresql10-docs-10.10-1.15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 postgresql10-plperl-10.10-1.15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 postgresql10-plpython-10.10-1.15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 postgresql10-pltcl-10.10-1.15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 postgresql10-server-10.10-1.15.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 postgresql-8.3.20-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql-contrib-8.3.20-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql-docs-8.3.20-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql-init-9.1-0.6.10.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql-libs-8.3.18-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql-libs-32bit-8.3.18-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql-server-8.3.20-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libecpg6-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libpq5-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libpq5-32bit-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql-contrib-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql-docs-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql-server-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-contrib-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-docs-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-server-9.1.9-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libecpg6-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 libpq5-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 libpq5-32bit-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql-contrib-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql-docs-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql-server-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-contrib-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-docs-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-server-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP4 libecpg6-9.3.5-2.3 as a component of SUSE Linux Enterprise Server 12 libpq5-9.3.5-2.3 as a component of SUSE Linux Enterprise Server 12 libpq5-32bit-9.3.5-2.3 as a component of SUSE Linux Enterprise Server 12 postgresql93-9.3.5-2.24 as a component of SUSE Linux Enterprise Server 12 postgresql93-contrib-9.3.5-2.24 as a component of SUSE Linux Enterprise Server 12 postgresql93-docs-9.3.5-2.24 as a component of SUSE Linux Enterprise Server 12 postgresql93-server-9.3.5-2.24 as a component of SUSE Linux Enterprise Server 12 libecpg6-9.4.5-4.1 as a component of SUSE Linux Enterprise Server 12 SP1 libpq5-9.4.5-4.1 as a component of SUSE Linux Enterprise Server 12 SP1 libpq5-32bit-9.4.5-4.1 as a component of SUSE Linux Enterprise Server 12 SP1 postgresql94-9.4.5-4.5 as a component of SUSE Linux Enterprise Server 12 SP1 postgresql94-contrib-9.4.5-4.5 as a component of SUSE Linux Enterprise Server 12 SP1 postgresql94-docs-9.4.5-4.5 as a component of SUSE Linux Enterprise Server 12 SP1 postgresql94-server-9.4.5-4.5 as a component of SUSE Linux Enterprise Server 12 SP1 libecpg6-9.4.9-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 libpq5-9.4.9-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 libpq5-32bit-9.4.9-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql94-9.4.9-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql94-contrib-9.4.9-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql94-docs-9.4.9-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql94-server-9.4.9-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 libecpg6-9.6.3-2.1 as a component of SUSE Linux Enterprise Server 12 SP3 libpq5-9.6.3-2.1 as a component of SUSE Linux Enterprise Server 12 SP3 libpq5-32bit-9.6.3-2.1 as a component of SUSE Linux Enterprise Server 12 SP3 postgresql96-9.6.3-2.4 as a component of SUSE Linux Enterprise Server 12 SP3 postgresql96-contrib-9.6.3-2.4 as a component of SUSE Linux Enterprise Server 12 SP3 postgresql96-docs-9.6.3-2.4 as a component of SUSE Linux Enterprise Server 12 SP3 postgresql96-server-9.6.3-2.4 as a component of SUSE Linux Enterprise Server 12 SP3 libecpg6-10.5-1.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 libpq5-10.5-1.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 libpq5-32bit-10.5-1.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 postgresql10-10.5-1.3.2 as a component of SUSE Linux Enterprise Server 12 SP4 postgresql10-contrib-10.5-1.3.2 as a component of SUSE Linux Enterprise Server 12 SP4 postgresql10-docs-10.5-1.3.2 as a component of SUSE Linux Enterprise Server 12 SP4 postgresql10-server-10.5-1.3.2 as a component of SUSE Linux Enterprise Server 12 SP4 libecpg6-10.10-1.15.1 as a component of SUSE Linux Enterprise Server 12 SP5 libpq5-10.10-1.15.1 as a component of SUSE Linux Enterprise Server 12 SP5 libpq5-32bit-10.10-1.15.1 as a component of SUSE Linux Enterprise Server 12 SP5 postgresql10-10.10-1.15.1 as a component of SUSE Linux Enterprise Server 12 SP5 postgresql10-contrib-10.10-1.15.1 as a component of SUSE Linux Enterprise Server 12 SP5 postgresql10-docs-10.10-1.15.1 as a component of SUSE Linux Enterprise Server 12 SP5 postgresql10-plperl-10.10-1.15.1 as a component of SUSE Linux Enterprise Server 12 SP5 postgresql10-plpython-10.10-1.15.1 as a component of SUSE Linux Enterprise Server 12 SP5 postgresql10-pltcl-10.10-1.15.1 as a component of SUSE Linux Enterprise Server 12 SP5 postgresql10-server-10.10-1.15.1 as a component of SUSE Linux Enterprise Server 12 SP5 libecpg6-9.4.9-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libpq5-9.4.9-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql94-9.4.9-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql94-contrib-9.4.9-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql94-docs-9.4.9-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql94-server-9.4.9-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libecpg6-10.10-1.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libpq5-10.10-1.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libpq5-32bit-10.10-1.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 postgresql10-10.10-1.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 postgresql10-contrib-10.10-1.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 postgresql10-docs-10.10-1.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 postgresql10-plperl-10.10-1.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 postgresql10-plpython-10.10-1.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 postgresql10-pltcl-10.10-1.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 postgresql10-server-10.10-1.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 postgresql-devel-8.3.23-0.4.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 postgresql94-devel-9.4.4-0.6.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 postgresql93-devel-9.3.5-2.3 as a component of SUSE Linux Enterprise Software Development Kit 12 postgresql94-devel-9.4.5-4.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 postgresql94-devel-9.4.9-14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 postgresql96-devel-9.6.3-2.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 postgresql10-devel-10.5-1.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 postgresql10-devel-10.10-1.15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 postgresql96-9.6.8-lp150.1.2 as a component of openSUSE Leap 15.0 postgresql96-server-9.6.8-lp150.1.2 as a component of openSUSE Leap 15.0 libecpg6-9.5.4-1.2 as a component of openSUSE Tumbleweed libecpg6-32bit-9.5.4-1.2 as a component of openSUSE Tumbleweed libpq5-9.5.4-1.2 as a component of openSUSE Tumbleweed libpq5-32bit-9.5.4-1.2 as a component of openSUSE Tumbleweed postgresql93-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-contrib-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-devel-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-docs-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-plperl-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-plpython-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-pltcl-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-server-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-test-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql94-9.4.10-1.1 as a component of openSUSE Tumbleweed postgresql94-contrib-9.4.10-1.1 as a component of openSUSE Tumbleweed postgresql94-devel-9.4.10-1.1 as a component of openSUSE Tumbleweed postgresql94-docs-9.4.10-1.1 as a component of openSUSE Tumbleweed postgresql94-plperl-9.4.10-1.1 as a component of openSUSE Tumbleweed postgresql94-plpython-9.4.10-1.1 as a component of openSUSE Tumbleweed postgresql94-pltcl-9.4.10-1.1 as a component of openSUSE Tumbleweed postgresql94-server-9.4.10-1.1 as a component of openSUSE Tumbleweed postgresql94-test-9.4.10-1.1 as a component of openSUSE Tumbleweed postgresql95-9.5.4-1.2 as a component of openSUSE Tumbleweed postgresql95-contrib-9.5.4-1.2 as a component of openSUSE Tumbleweed postgresql95-devel-9.5.4-1.2 as a component of openSUSE Tumbleweed postgresql95-docs-9.5.4-1.2 as a component of openSUSE Tumbleweed postgresql95-plperl-9.5.4-1.2 as a component of openSUSE Tumbleweed postgresql95-plpython-9.5.4-1.2 as a component of openSUSE Tumbleweed postgresql95-pltcl-9.5.4-1.2 as a component of openSUSE Tumbleweed postgresql95-server-9.5.4-1.2 as a component of openSUSE Tumbleweed postgresql95-test-9.5.4-1.2 as a component of openSUSE Tumbleweed postgresql10 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata postgresql94 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata postgresql94 as a component of SUSE Linux Enterprise Server 11 SP4 LTSS The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue. CVE-2012-3488 SUSE Linux Enterprise Desktop 12:libecpg6-9.3.5-2.3 SUSE Linux Enterprise Desktop 12:libpq5-9.3.5-2.3 SUSE Linux Enterprise Desktop 12:libpq5-32bit-9.3.5-2.3 SUSE Linux Enterprise Desktop 12:postgresql93-9.3.5-2.24 SUSE Linux Enterprise Desktop 12 SP1:libecpg6-9.4.5-4.1 SUSE Linux Enterprise Desktop 12 SP1:libpq5-9.4.5-4.1 SUSE Linux Enterprise Desktop 12 SP1:libpq5-32bit-9.4.5-4.1 SUSE Linux Enterprise Desktop 12 SP1:postgresql94-9.4.5-4.5 SUSE Linux Enterprise Desktop 12 SP2:libecpg6-9.4.9-14.1 SUSE Linux Enterprise Desktop 12 SP2:libpq5-9.4.9-14.1 SUSE Linux Enterprise Desktop 12 SP2:libpq5-32bit-9.4.9-14.1 SUSE Linux Enterprise Desktop 12 SP2:postgresql94-9.4.9-14.1 SUSE Linux Enterprise Desktop 12 SP3:libecpg6-9.6.3-2.1 SUSE Linux Enterprise Desktop 12 SP3:libpq5-9.6.3-2.1 SUSE Linux Enterprise Desktop 12 SP3:libpq5-32bit-9.6.3-2.1 SUSE Linux Enterprise Desktop 12 SP3:postgresql96-9.6.3-2.4 SUSE Linux Enterprise Desktop 12 SP4:libecpg6-10.5-1.3.1 SUSE Linux Enterprise Desktop 12 SP4:libpq5-10.5-1.3.1 SUSE Linux Enterprise Desktop 12 SP4:libpq5-32bit-10.5-1.3.1 SUSE Linux Enterprise Desktop 12 SP4:postgresql10-10.5-1.3.2 SUSE Linux Enterprise High Performance Computing 12 SP5:libecpg6-10.10-1.15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libpq5-10.10-1.15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libpq5-32bit-10.10-1.15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:postgresql10-10.10-1.15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:postgresql10-contrib-10.10-1.15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:postgresql10-docs-10.10-1.15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:postgresql10-plperl-10.10-1.15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:postgresql10-plpython-10.10-1.15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:postgresql10-pltcl-10.10-1.15.1 SUSE Linux Enterprise High Performance Computing 12 SP5:postgresql10-server-10.10-1.15.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql-8.3.20-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql-contrib-8.3.20-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql-docs-8.3.20-0.4.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql-init-9.1-0.6.10.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql-libs-8.3.18-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql-libs-32bit-8.3.18-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql-server-8.3.20-0.4.1 SUSE Linux Enterprise Server 11 SP3:libecpg6-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:libpq5-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:libpq5-32bit-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP3:postgresql-contrib-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP3:postgresql-docs-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP3:postgresql-server-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-contrib-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-docs-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-server-9.1.9-0.3.1 SUSE Linux Enterprise Server 11 SP4:libecpg6-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:libpq5-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:libpq5-32bit-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:postgresql-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP4:postgresql-contrib-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP4:postgresql-docs-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP4:postgresql-server-8.3.23-0.4.1 SUSE Linux Enterprise Server 11 SP4:postgresql94-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:postgresql94-contrib-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:postgresql94-docs-9.4.4-0.6.2 SUSE Linux Enterprise Server 11 SP4:postgresql94-server-9.4.4-0.6.2 SUSE Linux Enterprise Server 12:libecpg6-9.3.5-2.3 SUSE Linux Enterprise Server 12:libpq5-9.3.5-2.3 SUSE Linux Enterprise Server 12:libpq5-32bit-9.3.5-2.3 SUSE Linux Enterprise Server 12:postgresql93-9.3.5-2.24 SUSE Linux Enterprise Server 12:postgresql93-contrib-9.3.5-2.24 SUSE Linux Enterprise Server 12:postgresql93-docs-9.3.5-2.24 SUSE Linux Enterprise Server 12:postgresql93-server-9.3.5-2.24 SUSE Linux Enterprise Server 12 SP1:libecpg6-9.4.5-4.1 SUSE Linux Enterprise Server 12 SP1:libpq5-9.4.5-4.1 SUSE Linux Enterprise Server 12 SP1:libpq5-32bit-9.4.5-4.1 SUSE Linux Enterprise Server 12 SP1:postgresql94-9.4.5-4.5 SUSE Linux Enterprise Server 12 SP1:postgresql94-contrib-9.4.5-4.5 SUSE Linux Enterprise Server 12 SP1:postgresql94-docs-9.4.5-4.5 SUSE Linux Enterprise Server 12 SP1:postgresql94-server-9.4.5-4.5 SUSE Linux Enterprise Server 12 SP2:libecpg6-9.4.9-14.1 SUSE Linux Enterprise Server 12 SP2:libpq5-9.4.9-14.1 SUSE Linux Enterprise Server 12 SP2:libpq5-32bit-9.4.9-14.1 SUSE Linux Enterprise Server 12 SP2:postgresql94-9.4.9-14.1 SUSE Linux Enterprise Server 12 SP2:postgresql94-contrib-9.4.9-14.1 SUSE Linux Enterprise Server 12 SP2:postgresql94-docs-9.4.9-14.1 SUSE Linux Enterprise Server 12 SP2:postgresql94-server-9.4.9-14.1 SUSE Linux Enterprise Server 12 SP3:libecpg6-9.6.3-2.1 SUSE Linux Enterprise Server 12 SP3:libpq5-9.6.3-2.1 SUSE Linux Enterprise Server 12 SP3:libpq5-32bit-9.6.3-2.1 SUSE Linux Enterprise Server 12 SP3:postgresql96-9.6.3-2.4 SUSE Linux Enterprise Server 12 SP3:postgresql96-contrib-9.6.3-2.4 SUSE Linux Enterprise Server 12 SP3:postgresql96-docs-9.6.3-2.4 SUSE Linux Enterprise Server 12 SP3:postgresql96-server-9.6.3-2.4 SUSE Linux Enterprise Server 12 SP4:libecpg6-10.5-1.3.1 SUSE Linux Enterprise Server 12 SP4:libpq5-10.5-1.3.1 SUSE Linux Enterprise Server 12 SP4:libpq5-32bit-10.5-1.3.1 SUSE Linux Enterprise Server 12 SP4:postgresql10-10.5-1.3.2 SUSE Linux Enterprise Server 12 SP4:postgresql10-contrib-10.5-1.3.2 SUSE Linux Enterprise Server 12 SP4:postgresql10-docs-10.5-1.3.2 SUSE Linux Enterprise Server 12 SP4:postgresql10-server-10.5-1.3.2 SUSE Linux Enterprise Server 12 SP5:libecpg6-10.10-1.15.1 SUSE Linux Enterprise Server 12 SP5:libpq5-10.10-1.15.1 SUSE Linux Enterprise Server 12 SP5:libpq5-32bit-10.10-1.15.1 SUSE Linux Enterprise Server 12 SP5:postgresql10-10.10-1.15.1 SUSE Linux Enterprise Server 12 SP5:postgresql10-contrib-10.10-1.15.1 SUSE Linux Enterprise Server 12 SP5:postgresql10-docs-10.10-1.15.1 SUSE Linux Enterprise Server 12 SP5:postgresql10-plperl-10.10-1.15.1 SUSE Linux Enterprise Server 12 SP5:postgresql10-plpython-10.10-1.15.1 SUSE Linux Enterprise Server 12 SP5:postgresql10-pltcl-10.10-1.15.1 SUSE Linux Enterprise Server 12 SP5:postgresql10-server-10.10-1.15.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libecpg6-9.4.9-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libpq5-9.4.9-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql94-9.4.9-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql94-contrib-9.4.9-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql94-docs-9.4.9-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql94-server-9.4.9-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libecpg6-10.10-1.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpq5-10.10-1.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpq5-32bit-10.10-1.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:postgresql10-10.10-1.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:postgresql10-contrib-10.10-1.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:postgresql10-docs-10.10-1.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:postgresql10-plperl-10.10-1.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:postgresql10-plpython-10.10-1.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:postgresql10-pltcl-10.10-1.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:postgresql10-server-10.10-1.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:postgresql-devel-8.3.23-0.4.1 SUSE Linux Enterprise Software Development Kit 11 SP4:postgresql94-devel-9.4.4-0.6.2 SUSE Linux Enterprise Software Development Kit 12:postgresql93-devel-9.3.5-2.3 SUSE Linux Enterprise Software Development Kit 12 SP1:postgresql94-devel-9.4.5-4.1 SUSE Linux Enterprise Software Development Kit 12 SP2:postgresql94-devel-9.4.9-14.1 SUSE Linux Enterprise Software Development Kit 12 SP3:postgresql96-devel-9.6.3-2.1 SUSE Linux Enterprise Software Development Kit 12 SP4:postgresql10-devel-10.5-1.3.1 SUSE Linux Enterprise Software Development Kit 12 SP5:postgresql10-devel-10.10-1.15.1 openSUSE Leap 15.0:postgresql96-9.6.8-lp150.1.2 openSUSE Leap 15.0:postgresql96-server-9.6.8-lp150.1.2 openSUSE Tumbleweed:libecpg6-9.5.4-1.2 openSUSE Tumbleweed:libecpg6-32bit-9.5.4-1.2 openSUSE Tumbleweed:libpq5-9.5.4-1.2 openSUSE Tumbleweed:libpq5-32bit-9.5.4-1.2 openSUSE Tumbleweed:postgresql93-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-contrib-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-devel-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-docs-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-plperl-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-plpython-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-pltcl-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-server-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-test-9.3.15-1.1 openSUSE Tumbleweed:postgresql94-9.4.10-1.1 openSUSE Tumbleweed:postgresql94-contrib-9.4.10-1.1 openSUSE Tumbleweed:postgresql94-devel-9.4.10-1.1 openSUSE Tumbleweed:postgresql94-docs-9.4.10-1.1 openSUSE Tumbleweed:postgresql94-plperl-9.4.10-1.1 openSUSE Tumbleweed:postgresql94-plpython-9.4.10-1.1 openSUSE Tumbleweed:postgresql94-pltcl-9.4.10-1.1 openSUSE Tumbleweed:postgresql94-server-9.4.10-1.1 openSUSE Tumbleweed:postgresql94-test-9.4.10-1.1 openSUSE Tumbleweed:postgresql95-9.5.4-1.2 openSUSE Tumbleweed:postgresql95-contrib-9.5.4-1.2 openSUSE Tumbleweed:postgresql95-devel-9.5.4-1.2 openSUSE Tumbleweed:postgresql95-docs-9.5.4-1.2 openSUSE Tumbleweed:postgresql95-plperl-9.5.4-1.2 openSUSE Tumbleweed:postgresql95-plpython-9.5.4-1.2 openSUSE Tumbleweed:postgresql95-pltcl-9.5.4-1.2 openSUSE Tumbleweed:postgresql95-server-9.5.4-1.2 openSUSE Tumbleweed:postgresql95-test-9.5.4-1.2 moderate 4.9 AV:N/AC:M/Au:S/C:P/I:P/A:N