Red Hat Security AdvisoryRHSA-2008:0038
postgresql security update
Released 2008-01-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) postgresql-8.1.11-1.el5_1.1, postgresql-8.1.11-1.el5_1.1.i386, postgresql-8.1.11-1.el5_1.1.ia64 +37
- Red Hat Enterprise Linux AS version 4 postgresql-7.4.19-1.el4_6.1, postgresql-7.4.19-1.el4_6.1.i386, postgresql-7.4.19-1.el4_6.1.ia64 +41
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql-8.1.11-1.el5_1.1, postgresql-8.1.11-1.el5_1.1.i386, postgresql-contrib-8.1.11-1.el5_1.1 +9
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) postgresql-8.1.11-1.el5_1.1, postgresql-devel-8.1.11-1.el5_1.1, postgresql-devel-8.1.11-1.el5_1.1.i386 +6
- Red Hat Enterprise Linux Desktop version 4 postgresql-7.4.19-1.el4_6.1, postgresql-7.4.19-1.el4_6.1.i386, postgresql-contrib-7.4.19-1.el4_6.1 +19
- Red Hat Enterprise Linux ES version 4 postgresql-7.4.19-1.el4_6.1, postgresql-7.4.19-1.el4_6.1.i386, postgresql-7.4.19-1.el4_6.1.ia64 +30
- Red Hat Enterprise Linux WS version 4 postgresql-7.4.19-1.el4_6.1, postgresql-7.4.19-1.el4_6.1.i386, postgresql-7.4.19-1.el4_6.1.ia64 +30
Fixes 6 records
Priority LOW 37
Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.03855 · Published 2008-01-09 · Partial fix CWE-189
Priority LOW 36
The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (bac…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.03644 · Published 2008-01-09 · Fixed CWE-189
Priority LOW 35
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileg…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01573 · Published 2008-01-09 · Fixed CWE-287
Priority LOW 34
PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within ind…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.03124 · Published 2008-01-09 · Fixed CWE-264
Priority LOW 33
PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL q…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.01257 · Published 2007-06-19 · Fixed CWE-264
Priority LOW 25
The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (in…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03812 · Published 2008-01-09 · Partial fix CWE-399
THREATIST.IORead the docs