Red Hat Security AdvisoryRHSA-2012:0677
postgresql security update
Released 2012-05-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) postgresql-8.1.23-4.el5_8, postgresql-devel-8.1.23-4.el5_8, postgresql-devel-8.1.23-4.el5_8.i386 +6
- Red Hat Enterprise Linux (v. 5 server) postgresql-8.1.23-4.el5_8, postgresql-8.1.23-4.el5_8.i386, postgresql-8.1.23-4.el5_8.ia64 +37
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql-8.1.23-4.el5_8, postgresql-8.1.23-4.el5_8.i386, postgresql-contrib-8.1.23-4.el5_8 +9
Fixes 2 records
Priority LOW 35
CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a cra…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02653 · Published 2012-07-18 · Partial fix CWE-89
Priority LOW 35
CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.03625 · Published 2012-07-18 · Partial fix CWE-264
