Red Hat Security AdvisoryRHSA-2009:1484
postgresql security update
Released 2009-10-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) postgresql-8.1.18-2.el5_4.1, postgresql-8.1.18-2.el5_4.1.i386, postgresql-8.1.18-2.el5_4.1.ia64 +37
- Red Hat Enterprise Linux AS version 4 postgresql-7.4.26-1.el4_8.1, postgresql-7.4.26-1.el4_8.1.i386, postgresql-7.4.26-1.el4_8.1.ia64 +41
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql-8.1.18-2.el5_4.1, postgresql-8.1.18-2.el5_4.1.i386, postgresql-contrib-8.1.18-2.el5_4.1 +9
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) postgresql-8.1.18-2.el5_4.1, postgresql-devel-8.1.18-2.el5_4.1, postgresql-devel-8.1.18-2.el5_4.1.i386 +6
- Red Hat Enterprise Linux Desktop version 4 postgresql-7.4.26-1.el4_8.1, postgresql-7.4.26-1.el4_8.1.i386, postgresql-contrib-7.4.26-1.el4_8.1 +19
- Red Hat Enterprise Linux ES version 4 postgresql-7.4.26-1.el4_8.1, postgresql-7.4.26-1.el4_8.1.i386, postgresql-7.4.26-1.el4_8.1.ia64 +30
- Red Hat Enterprise Linux WS version 4 postgresql-7.4.26-1.el4_8.1, postgresql-7.4.26-1.el4_8.1.i386, postgresql-7.4.26-1.el4_8.1.ia64 +30
Fixes 2 records
Priority LOW 34
The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE an…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.0283 · Published 2009-09-17 · Fixed CWE-264
Priority LOW 31
PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error mess…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.10242 · Published 2009-03-17 · Fixed CWE-399
