Red Hat Security AdvisoryRHSA-2012:1036
postgresql security update
Released 2012-06-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) postgresql-8.1.23-5.el5_8, postgresql-devel-8.1.23-5.el5_8, postgresql-devel-8.1.23-5.el5_8.i386 +6
- Red Hat Enterprise Linux (v. 5 server) postgresql-8.1.23-5.el5_8, postgresql-8.1.23-5.el5_8.i386, postgresql-8.1.23-5.el5_8.ia64 +37
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql-8.1.23-5.el5_8, postgresql-8.1.23-5.el5_8.i386, postgresql-contrib-8.1.23-5.el5_8 +9
Fixes 1 record
Priority LOW 29
The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character,…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05734 · Published 2012-07-05 · Fixed CWE-310
