Tuesday, February 16, 2016

PostgreSQL Security Release

The PostgreSQL Group has released an update to all supported versions of their database system that fixes two security issues as well as other improvements.

For this reason, we have updated our stacks to PostgreSQL 9.4.6, which specifically solves the following issues:

  • CVE-2016-0773, an issue with regular expression (regex) parsing.
  • CVE-2016-0766, a privilege escalation issue for users of PL/Java.
If you want to read more about the issues, you can check out the PostgreSQL release news.

We released Bitnami Postgre installers for Linux, Windows and OS X, virtual machines and cloud images that fix these issues.

Have questions about Bitnami PostgreSQL or the security issue? Post to our community forum, and we would be happy to help you.