Red Hat Security AdvisoryRHSA-2010:0430
postgresql84 security update
Released 2010-05-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) postgresql84-8.4.4-1.el5_5.1, postgresql84-8.4.4-1.el5_5.1.i386, postgresql84-8.4.4-1.el5_5.1.ia64 +45
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql84-8.4.4-1.el5_5.1, postgresql84-8.4.4-1.el5_5.1.i386, postgresql84-contrib-8.4.4-1.el5_5.1 +15
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) postgresql84-8.4.4-1.el5_5.1, postgresql84-devel-8.4.4-1.el5_5.1, postgresql84-devel-8.4.4-1.el5_5.1.i386 +10
Fixes 3 records
Priority MEDIUM 44
PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remot…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.04081 · Published 2010-05-19 · Partial fix CWE-94
Priority LOW 32
The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_module…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.02888 · Published 2010-05-19 · Partial fix CWE-264
Priority LOW 30
PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote a…
CVSS 2.0MEDIUM 5.5· Network · Low privileges · Interaction — · EPSS 0.02658 · Published 2010-05-19 · Fixed CWE-264
THREATIST.IORead the docs