Red Hat Security AdvisoryRHSA-2011:1378
postgresql84 security update
Released 2011-10-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) postgresql84-8.4.9-1.el5_7.1, postgresql84-devel-8.4.9-1.el5_7.1, postgresql84-devel-8.4.9-1.el5_7.1.i386 +10
- Red Hat Enterprise Linux (v. 5 server) postgresql84-8.4.9-1.el5_7.1, postgresql84-8.4.9-1.el5_7.1.i386, postgresql84-8.4.9-1.el5_7.1.ia64 +45
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql84-8.4.9-1.el5_7.1, postgresql84-8.4.9-1.el5_7.1.i386, postgresql84-contrib-8.4.9-1.el5_7.1 +9
Fixes 1 record
Priority LOW 31
crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers t…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04972 · Published 2011-08-25 · Fixed CWE-310
