Red Hat Security AdvisoryRHSA-2012:1037
postgresql and postgresql84 security update
Released 2012-06-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) postgresql84-8.4.12-1.el5_8, postgresql84-devel-8.4.12-1.el5_8, postgresql84-devel-8.4.12-1.el5_8.i386 +10
- Red Hat Enterprise Linux (v. 5 server) postgresql84-8.4.12-1.el5_8, postgresql84-8.4.12-1.el5_8.i386, postgresql84-8.4.12-1.el5_8.ia64 +45
- Red Hat Enterprise Linux Desktop (v. 5 client) postgresql84-8.4.12-1.el5_8, postgresql84-8.4.12-1.el5_8.i386, postgresql84-contrib-8.4.12-1.el5_8 +9
- Red Hat Enterprise Linux Desktop (v. 6) postgresql-8.4.12-1.el6_2, postgresql-libs-8.4.12-1.el6_2
- Red Hat Enterprise Linux Desktop Optional (v. 6) postgresql-8.4.12-1.el6_2, postgresql-contrib-8.4.12-1.el6_2, postgresql-devel-8.4.12-1.el6_2 +6
- Red Hat Enterprise Linux HPC Node (v. 6) postgresql-8.4.12-1.el6_2, postgresql-libs-8.4.12-1.el6_2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) postgresql-8.4.12-1.el6_2, postgresql-contrib-8.4.12-1.el6_2, postgresql-devel-8.4.12-1.el6_2 +6
- Red Hat Enterprise Linux Server (v. 6) postgresql-8.4.12-1.el6_2, postgresql-8.4.12-1.el6_2.ppc, postgresql-contrib-8.4.12-1.el6_2 +10
- Red Hat Enterprise Linux Workstation (v. 6) postgresql-8.4.12-1.el6_2, postgresql-contrib-8.4.12-1.el6_2, postgresql-devel-8.4.12-1.el6_2 +7
Fixes 2 records
Priority LOW 29
The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character,…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05734 · Published 2012-07-05 · Fixed CWE-310
Priority LOW 24
PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.0293 · Published 2012-07-18 · Fixed CWE-399
