Red Hat Security AdvisoryRHSA-2011:1377
postgresql security update
Released 2011-10-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) postgresql-8.1.23-1.el5_7.2, postgresql-devel-8.1.23-1.el5_7.2, postgresql-devel-8.1.23-1.el5_7.2.i386 +6
- Red Hat Enterprise Linux (v. 5 server) postgresql-8.1.23-1.el5_7.2, postgresql-8.1.23-1.el5_7.2.i386, postgresql-8.1.23-1.el5_7.2.ia64 +37
- Red Hat Enterprise Linux AS version 4 postgresql-7.4.30-3.el4, postgresql-7.4.30-3.el4.i386, postgresql-7.4.30-3.el4.ia64 +41
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql-8.1.23-1.el5_7.2, postgresql-8.1.23-1.el5_7.2.i386, postgresql-contrib-8.1.23-1.el5_7.2 +9
- Red Hat Enterprise Linux Desktop version 4 postgresql-7.4.30-3.el4, postgresql-7.4.30-3.el4.i386, postgresql-contrib-7.4.30-3.el4 +19
- Red Hat Enterprise Linux ES version 4 postgresql-7.4.30-3.el4, postgresql-7.4.30-3.el4.i386, postgresql-7.4.30-3.el4.ia64 +30
- Red Hat Enterprise Linux Server (v. 6) postgresql-8.4.9-1.el6_1.1, postgresql-8.4.9-1.el6_1.1.ppc, postgresql-contrib-8.4.9-1.el6_1.1 +10
- Red Hat Enterprise Linux WS version 4 postgresql-7.4.30-3.el4, postgresql-7.4.30-3.el4.i386, postgresql-7.4.30-3.el4.ia64 +30
Fixes 1 record
Priority LOW 31
crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers t…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04972 · Published 2011-08-25 · Fixed CWE-310
